lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(auth): change SameSite to Lax for redirect compatibility

Browse source
This commit is contained in:
Claus Lohmar 2026-06-15 07:08:24 +00:00
parent 44fec75b42
commit b5ed7e2364
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
src/core/auth/oidc.go
View file

@ -137,7 +137,7 @@ func (h *OIDCHandler) Callback(w http.ResponseWriter, r *http.Request) {
Domain: h.config.Domain, Domain: h.config.Domain,
MaxAge: 3600, MaxAge: 3600,
HttpOnly: true, HttpOnly: true,
SameSite: http.SameSiteStrictMode, SameSite: http.SameSiteLaxMode,
}) })
http.Redirect(w, r, "/", http.StatusFound) http.Redirect(w, r, "/", http.StatusFound)

2
src/main.go
View file

@ -130,7 +130,7 @@ func main() {
Domain: cfg.OIDC.Domain, Domain: cfg.OIDC.Domain,
MaxAge: -1, MaxAge: -1,
HttpOnly: true, HttpOnly: true,
SameSite: http.SameSiteStrictMode, SameSite: http.SameSiteLaxMode,
}) })
// Redirect to Authelia's logout page to clear Authelia session // Redirect to Authelia's logout page to clear Authelia session
logoutURL := fmt.Sprintf("%s/logout", cfg.OIDC.IssuerURL) logoutURL := fmt.Sprintf("%s/logout", cfg.OIDC.IssuerURL)