Set cookie samesite default, allow configuration by env var

uwcirg · Oct 31, 2023 · bf8daa8 · bf8daa8
1 parent b86e190
commit bf8daa8
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/confidential_backend/config.py b/confidential_backend/config.py
@@ -14,6 +14,7 @@
 
 SESSION_TYPE = os.getenv("SESSION_TYPE", 'redis')
 SESSION_REDIS = redis.from_url(os.getenv("SESSION_REDIS", "redis://127.0.0.1:6379"))
+SESSION_COOKIE_SAMESITE = os.getenv("SESSION_COOKIE_SAMESITE", 'None')
 
 REQUEST_CACHE_URL = os.environ.get('REQUEST_CACHE_URL', 'redis://localhost:6379/0')
 REQUEST_CACHE_EXPIRE = 24 * 60 * 60  # 24 hours