Allow SameSite=None session cookies (#1359)

lucia-auth · Jan 27, 2024 · 86ce437 · 86ce437
1 parent 31dfa7d
commit 86ce437
Show file tree

Hide file tree

Showing 3 changed files with 8 additions and 2 deletions.
diff --git a/.auri/$6cnv96d7.md b/.auri/$6cnv96d7.md
@@ -0,0 +1,6 @@
+---
+package: "lucia" # package name
+type: "patch" # "major", "minor", "patch"
+---
+
+Allow `SameSite=None` session cookies
diff --git a/documentation/content/main/basics/configuration.md b/documentation/content/main/basics/configuration.md
@@ -233,7 +233,7 @@ const sessionCookie: {
 };
 
 type SessionCookieAttributes = {
-	sameSite?: "lax" | "strict"; // default: "lax"
+	sameSite?: "lax" | "strict" | "none"; // default: "lax"
 	path?: string; // default "/""
 	domain?: string; // default: undefined
 };

diff --git a/packages/lucia/src/auth/cookie.ts b/packages/lucia/src/auth/cookie.ts
@@ -6,7 +6,7 @@ import type { CookieAttributes } from "../utils/cookie.js";
 export const DEFAULT_SESSION_COOKIE_NAME = "auth_session";
 
 type SessionCookieAttributes = {
-	sameSite?: "strict" | "lax";
+	sameSite?: "strict" | "lax" | "none";
 	path?: string;
 	domain?: string;
 };