Merge pull request #16 from stevejhiggs/caseInsensitiveLoginSamesite

Make the samesite value on the login cookie case insensitive
bigcommerce · Dec 17, 2020 · f1be99f · f1be99f
2 parents 93505dd + d125ef8
commit f1be99f
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/src/api/operations/login.ts b/src/api/operations/login.ts
@@ -54,7 +54,9 @@ async function login({
     if (process.env.NODE_ENV !== 'production') {
       cookie = cookie.replace('; Secure', '')
       // SameSite=none can't be set unless the cookie is Secure
-      cookie = cookie.replace('; SameSite=none', '; SameSite=lax')
+      // bc seems to sometimes send back SameSite=None rather than none so make 
+      // this case insensitive
+      cookie = cookie.replace(/; SameSite=none/gi, '; SameSite=lax')
     }
 
     response.setHeader(