diff --git a/src/main/java/org/mjulikelion/baker/config/SecurityConfig.java b/src/main/java/org/mjulikelion/baker/config/SecurityConfig.java index 1d395d4..3976f48 100644 --- a/src/main/java/org/mjulikelion/baker/config/SecurityConfig.java +++ b/src/main/java/org/mjulikelion/baker/config/SecurityConfig.java @@ -73,6 +73,8 @@ public SecurityFilterChain securityFilterChain(HttpSecurity httpSecurity) throws .logoutUrl(logoutUrl) .logoutSuccessHandler((request, response, authentication) -> { ResponseCookie cookie = ResponseCookie.from(ACCESS_TOKEN, "") + .secure(true) + .sameSite("None") .maxAge(ZERO) .path("/") .build(); diff --git a/src/main/java/org/mjulikelion/baker/service/auth/AuthQueryServiceImpl.java b/src/main/java/org/mjulikelion/baker/service/auth/AuthQueryServiceImpl.java index 20775f9..ac6378e 100644 --- a/src/main/java/org/mjulikelion/baker/service/auth/AuthQueryServiceImpl.java +++ b/src/main/java/org/mjulikelion/baker/service/auth/AuthQueryServiceImpl.java @@ -48,6 +48,8 @@ public ResponseEntity> login(AuthLoginRequestDto authLoginRequ ResponseCookie cookie = ResponseCookie.from(ACCESS_TOKEN, JwtEncoder.encodeJwtBearerToken(jwtToken)) .maxAge(Duration.ofMillis(cookieMaxAge)) + .secure(true) + .sameSite("None") .httpOnly(true) .path(ROOT_PATH) .build();