diff --git a/app/main.py b/app/main.py index 2169aff..54e5ecf 100644 --- a/app/main.py +++ b/app/main.py @@ -21,14 +21,14 @@ app.include_router(user_router) app.include_router(pages_router) app.include_router(image_router) -origins = ["94.233.251.45", "http://localhost:5173"] +origins = ["http://localhost:5173"] app.add_middleware( CORSMiddleware, allow_origins=origins, allow_credentials=True, allow_methods=["GET", "POST", "PUT", "DELETE", "OPTIONS", "PATCH"], - allow_headers=["Content-Type", "Set-Cookie", "Access-Control-Allow-Headers", "Authorization", "Accept"], + allow_headers=["*"], ) app.mount("/static", StaticFiles(directory="app/static"), name="static") diff --git a/app/users/dependencies.py b/app/users/dependencies.py index 814a2a6..7006862 100644 --- a/app/users/dependencies.py +++ b/app/users/dependencies.py @@ -39,7 +39,7 @@ async def get_current_user(response: Response, token: str = Depends(get_token), raise UserIsNotPresentException access_token = create_access_token({"sub": str(user.id)}) - response.set_cookie(key="black_phoenix_access_token", value=access_token, httponly=True, secure=True) + response.set_cookie(key="black_phoenix_access_token", value=access_token, httponly=True, secure=True, samesite="none") return user diff --git a/app/users/router.py b/app/users/router.py index 530d282..f38fdc5 100644 --- a/app/users/router.py +++ b/app/users/router.py @@ -131,7 +131,7 @@ async def email_verification(user_code: str, uow=Depends(UnitOfWork)): async def login_user(response: Response, user_data: SUserLogin, uow=Depends(UnitOfWork)): user = await AuthService.authenticate_user(uow, user_data.email_or_username, user_data.password) access_token = create_access_token({"sub": str(user.id)}) - response.set_cookie("black_phoenix_access_token", access_token, httponly=True, secure=True) + response.set_cookie("black_phoenix_access_token", access_token, httponly=True, secure=True, samesite="none") return {"access_token": access_token}