search

jaliss / securesocial

A module that provides OAuth, OAuth2 and OpenID authentication for Play Framework applications
http://www.securesocial.ws
Apache License 2.0
1.19k stars 510 forks source link

Add cookie SameSite #616

Closed gmethvin closed 6 years ago

gmethvin commented 6 years ago

We should have a way to set the SameSite attribute of the SecureSocial cookie, since SameSite is supported in Play 2.6. I think it makes sense to set to Lax by default like the Play session cookie.

jaliss commented 6 years ago

@gmethvin I added a new config setting to support this and defaulted to Lax you suggested. Latest master-snapshot has the changes. If you try it out let me know if you see issues. Thanks!