[BE] 쿠키 sameSite를 None으로 변경한다. (#968)

woowacourse-teams · Nov 18, 2024 · 67f33bb · 67f33bb
1 parent 599d95a
commit 67f33bb
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/backend/bang-ggood/src/main/java/com/bang_ggood/auth/controller/cookie/CookieProvider.java b/backend/bang-ggood/src/main/java/com/bang_ggood/auth/controller/cookie/CookieProvider.java
@@ -47,10 +47,9 @@ public ResponseCookie createRefreshTokenCookie(String token) {
     private ResponseCookie createCookie(String tokenName, String token, long expiredMillis, String path) {
         return ResponseCookie
                 .from(tokenName, token)
-                .domain(domain)
                 .httpOnly(true)
                 .secure(true)
-                .sameSite(SameSite.LAX.attributeValue())
+                .sameSite(SameSite.NONE.attributeValue())
                 .maxAge(Duration.ofMillis(expiredMillis))
                 .path(path)
                 .build();
@@ -67,10 +66,9 @@ public ResponseCookie deleteRefreshTokenCookie() {
     private ResponseCookie deleteCookie(String tokenName, String path) {
         return ResponseCookie
                 .from(tokenName, "")
-                .domain(domain)
                 .httpOnly(true)
                 .secure(true)
-                .sameSite(SameSite.LAX.attributeValue())
+                .sameSite(SameSite.NONE.attributeValue())
                 .maxAge(0)
                 .path(path)
                 .build();