fix: cors attack issue? (#58)

This commit is contained in:
trafficlunar 2026-05-14 12:00:16 +01:00
parent 9f6569f439
commit d5c619567a

View file

@ -15,10 +15,10 @@ export const { handlers, signIn, signOut, auth } = NextAuth({
name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.session-token" : "next-auth.session-token", name: process.env.NODE_ENV === "production" ? "__Secure-next-auth.session-token" : "next-auth.session-token",
options: { options: {
httpOnly: true, httpOnly: true,
sameSite: "none", sameSite: "lax",
path: "/", path: "/",
secure: true, secure: process.env.NODE_ENV === "production",
domain: process.env.NODE_ENV === "production" ? ".tomodachishare.com" : "localhost", domain: process.env.NODE_ENV === "production" ? ".tomodachishare.com" : undefined,
}, },
}, },
}, },