Skip to content

Commit 90ff282

Browse files
committed
fix: auth bugs
1 parent 2baceb6 commit 90ff282

4 files changed

Lines changed: 52 additions & 46 deletions

File tree

apps/dashboard-api/src/controllers/auth.controller.js

Lines changed: 6 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ const sendTokenResponse = async (user, statusCode, res) => {
3939
httpOnly: true,
4040
expires: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000), // 7 days
4141
secure: process.env.NODE_ENV === 'production',
42-
sameSite: 'Strict'
42+
sameSite: process.env.NODE_ENV === 'production' ? 'none' : 'lax'
4343
};
4444

4545
if (process.env.NODE_ENV === 'production') {
@@ -288,10 +288,14 @@ module.exports.logout = async (req, res) => {
288288
res.cookie('accessToken', 'none', {
289289
expires: new Date(Date.now() + 10 * 1000),
290290
httpOnly: true,
291+
secure: process.env.NODE_ENV === 'production',
292+
sameSite: process.env.NODE_ENV === 'production' ? 'none' : 'lax'
291293
});
292294
res.cookie('refreshToken', 'none', {
293295
expires: new Date(Date.now() + 10 * 1000),
294296
httpOnly: true,
297+
secure: process.env.NODE_ENV === 'production',
298+
sameSite: process.env.NODE_ENV === 'production' ? 'none' : 'lax'
295299
});
296300

297301
res.status(200).json({ success: true, message: "Logged out successfully" });
@@ -334,4 +338,4 @@ module.exports.getMe = async (req, res) => {
334338
console.error(err);
335339
res.status(500).json({ error: "Internal Server Error" });
336340
}
337-
};
341+
};

0 commit comments

Comments
 (0)