diff --git a/Seasoned.Backend/Program.cs b/Seasoned.Backend/Program.cs index 046a90d..ed8a083 100644 --- a/Seasoned.Backend/Program.cs +++ b/Seasoned.Backend/Program.cs @@ -27,7 +27,7 @@ builder.Services.ConfigureApplicationCookie(options => { options.Cookie.Name = "Seasoned.Session"; options.Cookie.HttpOnly = true; - options.Cookie.SameSite = SameSiteMode.Lax; + options.Cookie.SameSite = SameSiteMode.None; options.Cookie.SecurePolicy = CookieSecurePolicy.Always; options.ExpireTimeSpan = TimeSpan.FromMinutes(30); options.Cookie.MaxAge = options.ExpireTimeSpan; @@ -39,6 +39,13 @@ builder.Services.ConfigureApplicationCookie(options => }; }); +builder.Services.Configure(options => +{ + options.ForwardedHeaders = ForwardedHeaders.XForwardedFor | ForwardedHeaders.XForwardedProto; + options.KnownNetworks.Clear(); + options.KnownProxies.Clear(); +}); + builder.Services.AddAuthorization(); builder.Services.AddControllers() @@ -95,6 +102,7 @@ using (var scope = app.Services.CreateScope()) } app.UseDefaultFiles(); +app.UseForwardedHeaders(); app.UseStaticFiles(); app.UseCors("SeasonedOriginPolicy"); app.UseAuthentication();