Stabilize auth cookies for proxied split-domain deployments

2026-03-02 17:50:16 -03:00
parent 83d6a4f367
commit ec6a20ebd1
4 changed files with 48 additions and 7 deletions
--- a/backend/app/core/config.py
+++ b/backend/app/core/config.py
@@ -33,6 +33,8 @@ class Settings(BaseSettings):
    auth_login_failure_window_seconds: int = 900
    auth_login_lockout_base_seconds: int = 30
    auth_login_lockout_max_seconds: int = 900
+    auth_cookie_domain: str = ""
+    auth_cookie_samesite: str = "auto"
    storage_root: Path = Path("/data/storage")
    upload_chunk_size: int = 4 * 1024 * 1024
    max_upload_files_per_request: int = 50