Merge pull request #26 from denvudd/fix/google-oauth

fix(cookies): update cookie settings to use dynamic samesite attribut…

Author: denvudd

apps/api/app/core/cookies.py

@@ -4,21 +4,22 @@
 
 
 def set_auth_cookies(response: Response, access_token: str, refresh_token: str) -> None:
-    secure = settings.ENVIRONMENT == "production"
+    is_prod = settings.ENVIRONMENT == "production"
+    samesite = "none" if is_prod else "lax"
     response.set_cookie(
         key="access_token",
         value=access_token,
         httponly=True,
-        secure=secure,
-        samesite="lax",
+        secure=is_prod,
+        samesite=samesite,
         max_age=settings.ACCESS_TOKEN_EXPIRE_MINUTES * 60,
     )
     response.set_cookie(
         key="refresh_token",
         value=refresh_token,
         httponly=True,
-        secure=secure,
-        samesite="lax",
+        secure=is_prod,
+        samesite=samesite,
         max_age=settings.REFRESH_TOKEN_EXPIRE_DAYS * 24 * 60 * 60,
         path="/api/auth/refresh",
     )