fix(auth): change SameSite to Lax for redirect compatibility

This commit is contained in:
Claus Lohmar 2026-06-15 07:08:24 +00:00
parent 44fec75b42
commit b5ed7e2364
2 changed files with 2 additions and 2 deletions

View file

@ -137,7 +137,7 @@ func (h *OIDCHandler) Callback(w http.ResponseWriter, r *http.Request) {
Domain: h.config.Domain,
MaxAge: 3600,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
SameSite: http.SameSiteLaxMode,
})
http.Redirect(w, r, "/", http.StatusFound)

View file

@ -130,7 +130,7 @@ func main() {
Domain: cfg.OIDC.Domain,
MaxAge: -1,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
SameSite: http.SameSiteLaxMode,
})
// Redirect to Authelia's logout page to clear Authelia session
logoutURL := fmt.Sprintf("%s/logout", cfg.OIDC.IssuerURL)