fix(cookie): change default config

adonisjs · Oct 3, 2023 · 5f63011 · 5f63011
1 parent 458b1b1
commit 5f63011
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/stubs/config.stub b/stubs/config.stub
@@ -2,6 +2,7 @@
 to: {{ app.configPath('session.ts') }}
 ---
 import env from '#start/env'
+import app from '@adonisjs/core/services/app';
 import { defineConfig } from '@adonisjs/session'
 
 export default defineConfig({
@@ -30,7 +31,8 @@ export default defineConfig({
   cookie: {
     path: '/',
     httpOnly: true,
-    sameSite: false,
+    secure: app.production,
+    sameSite: 'lax',
   },
 
   /**