Skip to content

chore: update samesite attribute from 'Lax' to 'None' in response settings - #6546

Merged
wxg0103 merged 1 commit into
v2from
pr@v2@fix_cookie
Jul 30, 2026
Merged

chore: update samesite attribute from 'Lax' to 'None' in response settings#6546
wxg0103 merged 1 commit into
v2from
pr@v2@fix_cookie

Conversation

@shaohuzhang1

Copy link
Copy Markdown
Contributor

chore: update samesite attribute from 'Lax' to 'None' in response settings

Copilot AI review requested due to automatic review settings July 30, 2026 08:21
@shaohuzhang1

Copy link
Copy Markdown
Contributor Author

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

@wxg0103
wxg0103 merged commit f31aac5 into v2 Jul 30, 2026
5 of 7 checks passed
@wxg0103
wxg0103 deleted the pr@v2@fix_cookie branch July 30, 2026 08:21

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the mk_file_auth cookie configuration in the login and anonymous chat authentication endpoints by changing the cookie SameSite attribute from Lax to "None" to allow cross-site cookie usage.

Changes:

  • Updated mk_file_auth cookie samesite attribute to "None" in the user login response.
  • Updated mk_file_auth cookie samesite attribute to "None" in the anonymous chat authentication response.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File Description
apps/users/views/login.py Changes the mk_file_auth cookie SameSite attribute for admin/login responses.
apps/chat/views/chat.py Changes the mk_file_auth cookie SameSite attribute for anonymous chat authentication responses.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread apps/chat/views/chat.py
Comment on lines 126 to 129
secure=secure,
httponly=True,
samesite='Lax',
samesite="None",
)
Comment thread apps/users/views/login.py
Comment on lines 58 to 61
secure=secure,
httponly=True,
samesite='Lax',
samesite="None",
)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants