Add note on SameSite

Ref #4097
This commit is contained in:
rijkvanzanten
2021-02-16 16:32:28 -05:00
parent e8d565b074
commit c4057377b6

View File

@@ -47,6 +47,14 @@ database instance.
| `REFRESH_TOKEN_COOKIE_SECURE` | Whether or not to use a secure cookie for the refresh token in cookie mode. | `false` |
| `REFRESH_TOKEN_COOKIE_SAME_SITE` | Value for `sameSite` in the refresh token cookie when in cookie mode. | `lax` |
::: tip Cookie Strictness
Browser are pretty strict when it comes to third-party cookies. If you're running into unexpected problems when running
your project and API on different domains, make sure to verify your configuration for `REFRESH_TOKEN_COOKIE_SECURE` and
`REFRESH_TOKEN_COOKIE_SAME_SITE`.
:::
## CORS
| Variable | Description | Default Value |