diff --git a/OliverBooth/Services/SessionService.cs b/OliverBooth/Services/SessionService.cs index ab1a2ae..9ee415c 100644 --- a/OliverBooth/Services/SessionService.cs +++ b/OliverBooth/Services/SessionService.cs @@ -98,7 +98,12 @@ internal sealed class SessionService : BackgroundService, ISessionService IPAddress? remoteIpAddress = response.HttpContext.Connection.RemoteIpAddress; _logger.LogDebug("Writing cookie 'sid' to HTTP response for {RemoteAddr}", remoteIpAddress); - response.Cookies.Append("sid", Convert.ToBase64String(buffer), new CookieOptions { Expires = DateTimeOffset.UtcNow + TimeSpan.FromDays(30) }); + response.Cookies.Append("sid", Convert.ToBase64String(buffer), new CookieOptions + { + Expires = DateTimeOffset.UtcNow + TimeSpan.FromDays(30), + Secure = true, + SameSite = SameSiteMode.Strict + }); } ///