Use cookie instead of plug session to prevent SameSite policy issues

pow-auth / pow_assent

Multi-provider authentication for your Pow enabled app

https://powauth.com

MIT License

321 stars 50 forks source link

Use cookie instead of plug session to prevent SameSite policy issues #190

Closed danschultzer closed 3 years ago

danschultzer commented 4 years ago

This PR resolves an issue where the plug session cookie has a SameSite policy. When using form_post method, and setting the plug session cookie with SameSite policy the cookie can't be loaded on POST as the POST comes from another domain. Instead of using plug session, this will not set a separate session cookie for PowAssent auth sessions.