rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Make auth cookie SameSite configurable

Browse Source 
Add same-site to auth cookie config with lax as the default,
PROBOD_AUTH_COOKIE_SAMESITE bootstrap mapping, and validation
that rejects none unless Secure is enabled.

Signed-off-by: Cursor Agent <cursoragent@cursor.com>

Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>
This commit is contained in:
Cursor Agent
2026-07-29 16:37:28 +00:00
committed by Bryan Frimin
parent cd6c46212a
commit 62d0ab68c4
9 changed files with 266 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
pkg/probod/aliases.go
View File

@@ -38,6 +38,7 @@ type (
OAuth2ServerConfig = probodconfig.OAuth2ServerConfig
OAuth2SigningKeyConfig = probodconfig.OAuth2SigningKeyConfig
CookieConfig = probodconfig.CookieConfig
CookieSameSite = probodconfig.CookieSameSite
PasswordConfig = probodconfig.PasswordConfig
AWSConfig = probodconfig.AWSConfig
ConnectorConfig = probodconfig.ConnectorConfig
@@ -67,3 +68,9 @@ type (
ITAMConfig = probodconfig.ITAMConfig
SlackConfig = probodconfig.SlackConfig
)
const (
CookieSameSiteLax = probodconfig.CookieSameSiteLax
CookieSameSiteStrict = probodconfig.CookieSameSiteStrict
CookieSameSiteNone = probodconfig.CookieSameSiteNone
)