Use samesite=strict because we don't need the cookie for page loads.

2026-02-13 20:22:05 +00:00
parent c621a14b8d
commit 9e13e36b66
1 changed files with 1 additions and 1 deletions
@@ -70,7 +70,7 @@ def set_session_cookie(response: Response, token: str) -> None:
        httponly=True,
        secure=True,
        path="/",
-        samesite="lax",
+        samesite="strict",
    )