Skip to content

Commit ab7e62c

Browse files
committed
(TP-77) feat: disable secure for development stage
1 parent 56b849b commit ab7e62c

1 file changed

Lines changed: 4 additions & 4 deletions

File tree

rentplace/src/main/java/kattsyn/dev/rentplace/controllers/AuthController.java

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -48,8 +48,8 @@ public ResponseEntity<JwtResponse> login(@RequestBody JwtRequest authRequest,
4848

4949
ResponseCookie refreshCookie = ResponseCookie.from("refreshToken", tokens.getRefreshToken())
5050
.httpOnly(true)
51-
.secure(true) // обязательно для SameSite=None
52-
.sameSite("None") // <== вот это ключевое
51+
.secure(false) // на прод вернуть true
52+
.sameSite("Lax") // вернуть None
5353
.path("/")
5454
.maxAge(Duration.ofDays(30)) // чтобы не исчезала
5555
.build();
@@ -102,8 +102,8 @@ public ResponseEntity<JwtResponse> refresh(@CookieValue(name = "refreshToken") S
102102

103103
ResponseCookie refreshCookie = ResponseCookie.from("refreshToken", jwtResponse.getRefreshToken())
104104
.httpOnly(true)
105-
.secure(true)
106-
.sameSite("None")
105+
.secure(false) // на прод вернуть true
106+
.sameSite("Lax") // вернуть None
107107
.path("/")
108108
.maxAge(Duration.ofDays(30))
109109
.build();

0 commit comments

Comments
 (0)