Fix samesite and path cookie attributes #28

ral-facilities · Feb 12, 2024 · 67e5992 · 67e5992
1 parent 679ed87
commit 67e5992
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/ldap_jwt_auth/routers/login.py b/ldap_jwt_auth/routers/login.py
@@ -47,8 +47,8 @@ def login(
             max_age=config.authentication.refresh_token_validity_days * 24 * 60 * 60,
             secure=True,
             httponly=True,
-            samesite="Lax",
-            path="/refresh",
+            samesite="lax",
+            path=f"{config.api.root_path}/refresh",
         )
         return response
     except (InvalidCredentialsError, UserNotActiveError) as exc: