rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use cookie SameSiteLaxMode when secure is false

Browse Source 
Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
This commit is contained in:
Sacha Al Himdani
2025-11-04 17:42:03 +01:00
parent fee5a9232e
commit c0018f858c
2 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/CONFIGURATION.md
View File

@@ -369,6 +369,8 @@ Session cookie lifetime in hours.
Controls whether the Secure flag is set on session cookies. When true, cookies are only sent over HTTPS connections.
**Important**: This must be set to `true` for SAML authentication to work properly. SAML requires `SameSite=None` cookies for cross-site POST requests from identity providers, and modern browsers require the `Secure` flag to be set when using `SameSite=None`. Setting this to `false` will cause SAML authentication to fail as session cookies will be rejected by browsers.
#### `auth.password.pepper` (string)
**Default**: Auto-generated