Merge pull request #28 from linux-odyssey/fix-cookie

fix: change cookie setting, prevent form trigger twice

app/src/components/AuthenticationPart.vue

@@ -155,7 +155,7 @@ const goBack = () => {
       </p>
       <button
         class="inline-flex justify-center rounded-lg text-sm font-black py-2 mt-3 bg-text-primary text-background w-full"
-        @click="handleSubmit"
+        type="submit"
       >
         <span v-if="isRegister">Sign up</span>
         <span v-else>Log in / Sign up</span>

server/src/middleware/session.js

@@ -10,8 +10,8 @@ export default session({
   rolling: true,
   cookie: {
     httpOnly: true,
-    secure: config.isProduction,
+    secure: false,
-    sameSite: 'strict',
+    sameSite: 'lax',
     maxAge: config.sessionMaxAge,
   },
   store: MongoStore.create({