fix: OAuth flow by setting scope and cookie to 'lax'

server/src/middleware/error.ts

@@ -13,7 +13,7 @@ export default function errorHandler(
   req: Request,
   res: Response,
   // eslint-disable-next-line no-unused-vars
-  next: NextFunction
+  _next: NextFunction
 ) {
   logger.error(err) // Log error stack trace to the console
   res.status(500).send({ message: 'Something broke!' }) // Send error response

server/src/middleware/session.ts

@@ -12,7 +12,7 @@ export default session({
     domain: config.domain,
     httpOnly: true,
     secure: config.protocol === 'https:',
-    sameSite: 'strict',
+    sameSite: 'lax',
     maxAge: config.sessionMaxAge,
   },
   store: MongoStore.create({