Use samesite=strict because we don't need the cookie for page loads.

2026-02-13 20:22:05 +00:00
parent c1f8020f6b
commit 7f52276c23
1 changed files with 1 additions and 1 deletions
@@ -70,7 +70,7 @@ def set_session_cookie(response: Response, token: str) -> None:
        httponly=True,
        secure=True,
        path="/",
-        samesite="lax",
+        samesite="strict",
    )