try cookie SameSite none
@@ -408,7 +408,9 @@ func clearTokenInCookie(c echo.Context) {
Path: "/",
Expires: time.Unix(0, 0),
HttpOnly: true,
- SameSite: http.SameSiteLaxMode,
+ // TODO
+ // SameSite: http.SameSiteLaxMode,
+ SameSite: http.SameSiteNoneMode,
})
}
@@ -417,7 +419,9 @@ func newTokenCookie(token string) *http.Cookie {
cookie.Name = KALM_TOKEN_KEY_NAME
cookie.Expires = time.Now().Add(24 * 7 * time.Hour)
cookie.HttpOnly = true
- cookie.SameSite = http.SameSiteLaxMode
+ // TODO
+ // cookie.SameSite = http.SameSiteLaxMode
+ cookie.SameSite = http.SameSiteNoneMode
cookie.Path = "/"
cookie.Value = token
return cookie
