|
|
|
@ -248,11 +248,17 @@ func (s *APIV2Service) buildAccessTokenCookie(ctx context.Context, accessToken s
|
|
|
|
|
} else {
|
|
|
|
|
attrs = append(attrs, "Expires="+expireTime.Format(time.RFC1123))
|
|
|
|
|
}
|
|
|
|
|
workspaceGeneralSetting, err := s.Store.GetWorkspaceGeneralSetting(ctx)
|
|
|
|
|
if err != nil {
|
|
|
|
|
return "", errors.Wrap(err, "failed to get workspace setting")
|
|
|
|
|
|
|
|
|
|
md, ok := metadata.FromIncomingContext(ctx)
|
|
|
|
|
if !ok {
|
|
|
|
|
return "", errors.New("failed to get metadata from context")
|
|
|
|
|
}
|
|
|
|
|
var origin string
|
|
|
|
|
for _, v := range md.Get("origin") {
|
|
|
|
|
origin = v
|
|
|
|
|
}
|
|
|
|
|
if strings.HasPrefix(workspaceGeneralSetting.InstanceUrl, "https://") {
|
|
|
|
|
isHTTPS := strings.HasPrefix(origin, "https://")
|
|
|
|
|
if isHTTPS {
|
|
|
|
|
attrs = append(attrs, "SameSite=None")
|
|
|
|
|
attrs = append(attrs, "Secure")
|
|
|
|
|
} else {
|
|
|
|
|