issue resolved

Author: harshitap1305

backend/.env.example

@@ -13,4 +13,6 @@ CLOUDINARY_API_KEY=your_api_key
 CLOUDINARY_API_SECRET=your_api_secret
 
 EMAIL_USER=youremail@gmail.com
-EMAIL_PASS=yourapppassword 
+EMAIL_PASS=yourapppassword 
+
+NODE_ENV=development  # "development" for local or "production" for deployment

backend/index.js

@@ -30,6 +30,10 @@ app.use(
     secret: "keyboard cat",
     resave: false,
     saveUninitialized: false,
+    cookie: {
+    secure: process.env.NODE_ENV === "production",          // HTTPS only in prod
+    sameSite: process.env.NODE_ENV === "production" ? "none" : "lax",  // cross-origin in prod
+  },
   }),
 );