From 7f52276c23289050cdb30fb2751db2e27ea27b0f Mon Sep 17 00:00:00 2001 From: Leo Vasanko Date: Fri, 13 Feb 2026 20:22:05 +0000 Subject: [PATCH] Use samesite=strict because we don't need the cookie for page loads. --- paskia/fastapi/session.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/paskia/fastapi/session.py b/paskia/fastapi/session.py index 69a3696..3c71bc8 100644 --- a/paskia/fastapi/session.py +++ b/paskia/fastapi/session.py @@ -70,7 +70,7 @@ def set_session_cookie(response: Response, token: str) -> None: httponly=True, secure=True, path="/", - samesite="lax", + samesite="strict", )