Mark cookies as sameSite=Strict

2021-05-19 18:08:26 +02:00
parent 4d9f554fe6
commit 312d9b7a6f
2 changed files with 3 additions and 2 deletions
--- a/src/infra/tcp_server.rs
+++ b/src/infra/tcp_server.rs
@@ -5,7 +5,7 @@ use actix_http::HttpServiceBuilder;
 use actix_server::ServerBuilder;
 use actix_service::{map_config, Service};
 use actix_web::{
-    cookie::Cookie,
+    cookie::{Cookie, SameSite},
    dev::{AppConfig, ServiceRequest},
    error::{ErrorBadRequest, ErrorUnauthorized},
    web, App, HttpRequest, HttpResponse,
@@ -97,6 +97,7 @@ where
                            .max_age(1.days())
                            .path("/api")
                            .http_only(true)
+                            .same_site(SameSite::Strict)
                            .finish(),
                    )
                    .body(token.as_str().to_owned()),