From affc5e0b8a51b053ca0c863b4b50e3fd484bf398 Mon Sep 17 00:00:00 2001 From: Gabriel Luiz Freitas Almeida Date: Tue, 2 Apr 2024 00:25:20 -0300 Subject: [PATCH] Update authentication settings for access token cookie --- src/backend/base/langflow/services/settings/auth.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/backend/base/langflow/services/settings/auth.py b/src/backend/base/langflow/services/settings/auth.py index a5bd7ed80..103c96a40 100644 --- a/src/backend/base/langflow/services/settings/auth.py +++ b/src/backend/base/langflow/services/settings/auth.py @@ -40,9 +40,9 @@ class AuthSettings(BaseSettings): """The Secure attribute of the refresh token cookie.""" REFRESH_HTTPONLY: bool = True """The HttpOnly attribute of the refresh token cookie.""" - ACCESS_SAME_SITE: Literal["lax", "strict", "none"] = "none" + ACCESS_SAME_SITE: Literal["lax", "strict", "none"] = "lax" """The SameSite attribute of the access token cookie.""" - ACCESS_SECURE: bool = True + ACCESS_SECURE: bool = False """The Secure attribute of the access token cookie.""" ACCESS_HTTPONLY: bool = False """The HttpOnly attribute of the access token cookie."""