Switched from 4 to http.SameSiteNoneMode

Cloud-Foundations · Mar 30, 2021 · 3f6db8e · 3f6db8e
1 parent 7bdc22a
commit 3f6db8e
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/cmd/keymasterd/app.go b/cmd/keymasterd/app.go
@@ -601,7 +601,7 @@ func (state *RuntimeState) setNewAuthCookie(w http.ResponseWriter, username stri
 		return "", err
 	}
 	expiration := time.Now().Add(time.Duration(maxAgeSecondsAuthCookie) * time.Second)
-	authCookie := http.Cookie{Name: authCookieName, Value: cookieVal, Expires: expiration, Path: "/", HttpOnly: true, Secure: true, SameSite: 4}
+	authCookie := http.Cookie{Name: authCookieName, Value: cookieVal, Expires: expiration, Path: "/", HttpOnly: true, Secure: true, SameSite: http.SameSiteNoneMode}
 
 	//use handler with original request.
 	if w != nil {
@@ -629,7 +629,7 @@ func (state *RuntimeState) updateAuthCookieAuthlevel(w http.ResponseWriter, r *h
 		return "", err
 	}
 
-	updatedAuthCookie := http.Cookie{Name: authCookieName, Value: cookieVal, Expires: authCookie.Expires, Path: "/", HttpOnly: true, Secure: true, SameSite: 4}
+	updatedAuthCookie := http.Cookie{Name: authCookieName, Value: cookieVal, Expires: authCookie.Expires, Path: "/", HttpOnly: true, Secure: true, SameSite: http.SameSiteNoneMode}
 	logger.Debugf(3, "about to update authCookie")
 	http.SetCookie(w, &updatedAuthCookie)
 	return authCookie.Value, nil
@@ -1174,7 +1174,7 @@ func (state *RuntimeState) logoutHandler(w http.ResponseWriter, r *http.Request)
 
 	if authCookie != nil {
 		expiration := time.Unix(0, 0)
-		updatedAuthCookie := http.Cookie{Name: authCookieName, Value: "", Expires: expiration, Path: "/", HttpOnly: true, Secure: true, SameSite: 4}
+		updatedAuthCookie := http.Cookie{Name: authCookieName, Value: "", Expires: expiration, Path: "/", HttpOnly: true, Secure: true, SameSite: http.SameSiteNoneMode}
 		http.SetCookie(w, &updatedAuthCookie)
 	}
 	//redirect to login