diff --git a/config.py b/config.py index 26551ca..ec88ee6 100644 --- a/config.py +++ b/config.py @@ -39,7 +39,7 @@ class Config: # Auth0 SESSION_COOKIE_SECURE = False SESSION_COOKIE_HTTPONLY = True - SESSION_COOKIE_SAMESITE = 'Lax' + SESSION_COOKIE_SAMESITE = 'None' REMEMBER_COOKIE_SECURE = True WTF_CSRF_ENABLED = True # WTF_CSRF_CHECK_DEFAULT = False # We'll check it manually for API routes