introduce samesite setting for login cookie

ref #15067
2026-08-18 17:15:08 -05:00 · 2019-02-01 11:47:21 +01:00
parent 68ae17e4a4
commit a6bd2c73a0
4 changed files with 23 additions and 0 deletions
@@ -96,6 +96,7 @@ func (s *UserAuthTokenServiceImpl) writeSessionCookie(ctx *models.ReqContext, va
 		Path:     setting.AppSubUrl + "/",
 		Secure:   s.Cfg.SecurityHTTPSCookies,
 		MaxAge:   maxAge,
+		SameSite: s.Cfg.LoginCookieSameSite,
 	}

 	http.SetCookie(ctx.Resp, &cookie)