Set cookie default to httpOnly: false (#683)

supabase · Nov 10, 2023 · 1e079c3 · 1e079c3
1 parent 9726faf
commit 1e079c3
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 0 deletions.
diff --git a/.changeset/witty-months-tap.md b/.changeset/witty-months-tap.md
@@ -0,0 +1,5 @@
+---
+'@supabase/ssr': patch
+---
+
+Set cookie default to httpOnly: false
diff --git a/packages/ssr/src/utils/constants.ts b/packages/ssr/src/utils/constants.ts
@@ -3,5 +3,6 @@ import { CookieOptions } from '../types';
 export const DEFAULT_COOKIE_OPTIONS: CookieOptions = {
 	path: '/',
 	sameSite: 'lax',
+	httpOnly: false,
 	maxAge: 60 * 60 * 24 * 365 * 1000
 };