security

api/handlers/authHandler.go

@@ -8,6 +8,7 @@ import (
 	"portfolio/api/service/jwt"
 	"portfolio/database/ent"
 	"portfolio/database/query"
+	"time"
 )
 
 func Login(w http.ResponseWriter, r *http.Request) {
@@ -41,10 +42,10 @@ func Login(w http.ResponseWriter, r *http.Request) {
 
 			cookie := &http.Cookie{Name: "jwt",
 				Value:    jwtToken,
-				//HttpOnly: true,
-				//Secure:   true,
-				//SameSite: http.SameSiteNoneMode,
-				//Expires:  time.Now().Add(24 * time.Hour),
+				HttpOnly: true,
+				Secure:   true,
+				SameSite: http.SameSiteStrictMode,
+				Expires:  time.Now().Add(24 * time.Hour),
 			}
 
 			http.SetCookie(w, cookie)