Merge pull request #47 from maykinmedia/feature/45-same-site-options

🔧[#45] add session and CSRF samesite option
maykinmedia · Aug 13, 2024 · a965065 · a965065
2 parents 4340bf4 + a49870b
commit a965065
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/open_api_framework/conf/base.py b/open_api_framework/conf/base.py
@@ -416,8 +416,10 @@
 #
 SESSION_COOKIE_SECURE = IS_HTTPS
 SESSION_COOKIE_HTTPONLY = True
+SESSION_COOKIE_SAMESITE = config("SESSION_COOKIE_SAMESITE", "Strict")
 
 CSRF_COOKIE_SECURE = IS_HTTPS
+CSRF_COOKIE_SAMESITE = config("CSRF_COOKIE_SAMESITE", "Strict")
 
 X_FRAME_OPTIONS = "DENY"