fix: use same site lax mode to allow setting cooking on redirect

1 files changed, 6 insertions, 1 deletions

diff --git a/app/controllers/sessions/controller.go b/app/controllers/sessions/controller.go
index 77a30fd..5681f65 100644
--- a/app/controllers/sessions/controller.go
+++ b/app/controllers/sessions/controller.go
@@ -139,7 +139,12 @@ func (c *Controller) Create(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	cookie.Write(w, web.NewCookie("session", encoded, cookie.WithExpiration(tokens.Expiry)))
+	cookie.Write(w, web.NewCookie(
+		"session",
+		encoded,
+		cookie.WithExpiration(tokens.Expiry),
+		cookie.WithSameSite(http.SameSiteLaxMode),
+	))
 	http.Redirect(w, r, "/dashboard", http.StatusFound)
 }