lucretia/Ngino
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(server): fixes lax cookie SecurePolicy issue

Browse Source
This commit is contained in:
lucretia
2026-07-18 19:42:39 +02:00
parent 6240030dd5
commit 7217f29909
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ReverseLlama.Server/Program.cs
+3 -3
View File
@@ -31,7 +31,7 @@ if (settings.Keycloak.IsConfigured)
{ {
options.Cookie.Name = "ReverseLlama.Admin"; options.Cookie.Name = "ReverseLlama.Admin";
options.Cookie.SameSite = SameSiteMode.Lax; options.Cookie.SameSite = SameSiteMode.Lax;
options.Cookie.SecurePolicy = CookieSecurePolicy.SameAsRequest; options.Cookie.SecurePolicy = CookieSecurePolicy.Always;
options.LoginPath = "/admin/login"; options.LoginPath = "/admin/login";
options.LogoutPath = "/admin/logout"; options.LogoutPath = "/admin/logout";
}) })
@@ -46,9 +46,9 @@ if (settings.Keycloak.IsConfigured)
options.SaveTokens = true; options.SaveTokens = true;
options.GetClaimsFromUserInfoEndpoint = true; options.GetClaimsFromUserInfoEndpoint = true;
options.CorrelationCookie.SameSite = SameSiteMode.Lax; options.CorrelationCookie.SameSite = SameSiteMode.Lax;
options.CorrelationCookie.SecurePolicy = CookieSecurePolicy.SameAsRequest; options.CorrelationCookie.SecurePolicy = CookieSecurePolicy.Always;
options.NonceCookie.SameSite = SameSiteMode.Lax; options.NonceCookie.SameSite = SameSiteMode.Lax;
options.NonceCookie.SecurePolicy = CookieSecurePolicy.SameAsRequest; options.NonceCookie.SecurePolicy = CookieSecurePolicy.Always;
options.Scope.Clear(); options.Scope.Clear();
options.Scope.Add("openid"); options.Scope.Add("openid");
options.Scope.Add("profile"); options.Scope.Add("profile");