[Bug]: Cookie SameSite "none" not available as an option

[dmaksimov]

Package

lucia-auth

Describe the bug

The sameSite attribute for cookies allows "lax" and "strict" but is missing "none".

lucia/packages/lucia/src/auth/cookie.ts

Line 9 in 83960e2

sameSite?: "strict" | "lax";

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value

Is there a reason for this?

I can create a PR to add it but wanted to check first.

[pilcrowOnPaper]

Third party cookies are being deprecated by browsers, so I don’t see a reason to support it

[dmaksimov]

Ah gotcha, that makes sense.

Any suggestions on displaying authenticated content inside an iframe on a different domain securely?

[pilcrowOnPaper]

Makes sense. Yeah if you could make a PR for it, I can merge it