From 69c456b0b39901ffe8a585660e783693d2a9b6bb Mon Sep 17 00:00:00 2001
From: Leo Vasanko <leo@git>
Date: Tue, 17 Feb 2026 19:41:09 +0000
Subject: [PATCH] Move __main__.py to paskia package, use samesite=strict for
 cookies.

---
 paskia/{fastapi => }/__main__.py | 0
 paskia/fastapi/mainapp.py        | 2 +-
 paskia/fastapi/session.py        | 4 ++--
 pyproject.toml                   | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)
 rename paskia/{fastapi => }/__main__.py (100%)

diff --git a/paskia/fastapi/__main__.py b/paskia/__main__.py
similarity index 100%
rename from paskia/fastapi/__main__.py
rename to paskia/__main__.py
diff --git a/paskia/fastapi/mainapp.py b/paskia/fastapi/mainapp.py
index 0341f21..e82efdc 100644
--- a/paskia/fastapi/mainapp.py
+++ b/paskia/fastapi/mainapp.py
@@ -12,7 +12,7 @@ from paskia import authcode, globals
 from paskia.db import start_background, stop_background
 from paskia.db.logging import configure_db_logging
 from paskia.fastapi import admin, api, auth_host, oid, ws
-from paskia.fastapi.__main__ import DEVMODE
+from paskia.__main__ import DEVMODE
 from paskia.fastapi.logging import AccessLogMiddleware, configure_access_logging
 from paskia.fastapi.session import AUTH_COOKIE
 from paskia.util import hostutil, passphrase, vitedev
diff --git a/paskia/fastapi/session.py b/paskia/fastapi/session.py
index 69a3696..2d87b0e 100644
--- a/paskia/fastapi/session.py
+++ b/paskia/fastapi/session.py
@@ -70,7 +70,7 @@ def set_session_cookie(response: Response, token: str) -> None:
         httponly=True,
         secure=True,
         path="/",
-        samesite="lax",
+        samesite="strict",
     )
 
 
@@ -84,5 +84,5 @@ def clear_session_cookie(response: Response) -> None:
         httponly=True,
         secure=True,
         path="/",
-        samesite="lax",
+        samesite="strict",
     )
diff --git a/pyproject.toml b/pyproject.toml
index 4e7193a..424ef29 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -86,7 +86,7 @@ dev = [
 ]
 
 [project.scripts]
-paskia = "paskia.fastapi.__main__:main"
+paskia = "paskia.__main__:main"
 
 [tool.hatch.build]
 artifacts = ["paskia/frontend-build"]