diff --git a/src/starterProject/WebAPI/Controllers/AuthController.cs b/src/starterProject/WebAPI/Controllers/AuthController.cs index b905b478..53507815 100644 --- a/src/starterProject/WebAPI/Controllers/AuthController.cs +++ b/src/starterProject/WebAPI/Controllers/AuthController.cs @@ -116,7 +116,14 @@ private string getRefreshTokenFromCookies() private void setRefreshTokenToCookie(RefreshToken refreshToken) { - CookieOptions cookieOptions = new() { HttpOnly = true, Expires = DateTime.UtcNow.AddDays(7) }; + CookieOptions cookieOptions = + new() + { + HttpOnly = true, + Secure = true, + SameSite = SameSiteMode.None, + Expires = DateTime.UtcNow.AddDays(7) + }; Response.Cookies.Append(key: "refreshToken", refreshToken.Token, cookieOptions); } }