Fix login loop

Setting `SameSite=None` also requires setting `Secure`, see https://web.dev/samesite-cookies-explained/#samesite=none-must-be-secure. Fixes meetfranz#4
tlinhart · Jun 5, 2023 · 79b7c0d · 79b7c0d
1 parent fb76f0f
commit 79b7c0d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.js b/index.js
@@ -19,7 +19,7 @@ module.exports = Franz => class MicrosoftTeams extends Franz {
   onHeadersReceived(details, callback) {
     if (details.responseHeaders && details.responseHeaders['Set-Cookie'] && details.responseHeaders['Set-Cookie'].length && !details.responseHeaders['Set-Cookie'][0].includes('SameSite=none')) {
       // eslint-disable-next-line no-param-reassign
-      details.responseHeaders['Set-Cookie'][0] = `${details.responseHeaders['Set-Cookie'][0]}; SameSite=none`;
+      details.responseHeaders['Set-Cookie'][0] = `${details.responseHeaders['Set-Cookie'][0]}; SameSite=none; Secure`;
     }
     callback({ cancel: false, responseHeaders: details.responseHeaders });
   }