You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
(Optional) Set this to 'none', 'lax', or 'strict' to enforce SameSite cookies upon retrieval.
'strict' - If the request is on the same "site for cookies" (see the RFC draft for more information), pass this option to add a layer of defense against CSRF.
'lax' - If the request is from another site, but is directly because of navigation by the user, such as, <link type=prefetch> or <a href="...">, then use lax.
'none' - This indicates a cross-origin request.
undefined - SameSite is not be enforced! This can be a valid use-case for when CSRF isn't in the threat model of the system being built.