Merge pull request #136 from cloudscribe/feature/1125

JimKerslake · web-flow · commit b6d917feb3b7 · 2025-08-08T13:20:57.000+01:00
#1125 setting cookie status to Lax by default
diff --git a/Content/WebApp/Startup.cs b/Content/WebApp/Startup.cs
@@ -89,7 +89,7 @@ out _didSetupIdServer
             {
                 // This lambda determines whether user consent for non-essential cookies is needed for a given request.
                 options.CheckConsentNeeded = cloudscribe.Core.Identity.SiteCookieConsent.NeedsConsent;
-                options.MinimumSameSitePolicy = Microsoft.AspNetCore.Http.SameSiteMode.None;
+                options.MinimumSameSitePolicy = Microsoft.AspNetCore.Http.SameSiteMode.Lax;
                 options.ConsentCookie.Name = "cookieconsent_status";
                 options.Secure = CookieSecurePolicy.Always;
             });

Original file line number	Diff line number	Diff line change
`@@ -89,7 +89,7 @@ out _didSetupIdServer`
`89`	`89`	`{`
`90`	`90`	`// This lambda determines whether user consent for non-essential cookies is needed for a given request.`
`91`	`91`	`options.CheckConsentNeeded = cloudscribe.Core.Identity.SiteCookieConsent.NeedsConsent;`
`92`		`- options.MinimumSameSitePolicy = Microsoft.AspNetCore.Http.SameSiteMode.None;`
	`92`	`+ options.MinimumSameSitePolicy = Microsoft.AspNetCore.Http.SameSiteMode.Lax;`
`93`	`93`	`options.ConsentCookie.Name = "cookieconsent_status";`
`94`	`94`	`options.Secure = CookieSecurePolicy.Always;`
`95`	`95`	`});`