Fix session cookie not being set in HTTPS

Signed-off-by: Brian Evans <ebrian101@gmail.com>
mrbrianevans · Oct 18, 2024 · b08ba5e · b08ba5e
1 parent 119e154
commit b08ba5e
Showing 1 changed file with 3 additions and 2 deletions.
diff --git a/server/index.ts b/server/index.ts
@@ -6,7 +6,7 @@ import {serverLogTransport} from '../backend-shared/loggers.js'
 import RedisStore from 'connect-redis'
 const port = parseInt(process.env.PORT??'4004')
 
-const fastify = Fastify({logger: {stream: serverLogTransport, level: 'trace'}})
+const fastify = Fastify({logger: {stream: serverLogTransport, level: 'trace'}, trustProxy: true})
 
 //register any third party plugins here
 {
@@ -15,7 +15,8 @@ const fastify = Fastify({logger: {stream: serverLogTransport, level: 'trace'}})
     secret: getEnv('SESSION_SECRET'),
     cookie: {
       secure: getEnv('SITE_ADDRESS').startsWith('https'),
-      maxAge: 86400_000*30
+      maxAge: 86400_000*30,
+      sameSite: 'lax'
     },
     saveUninitialized: false,
     // set store to Redis so that sessions are persisted after server restarts