From b8e520152b9ddb38dee122ba019823efe65131d5 Mon Sep 17 00:00:00 2001
From: wancat <wancat@wancat.cc>
Date: Mon, 18 Sep 2023 23:37:25 +0800
Subject: [PATCH] fix: change cookie setting, prevent form trigger twice

---
 app/src/components/AuthenticationPart.vue | 2 +-
 server/src/middleware/session.js          | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/app/src/components/AuthenticationPart.vue b/app/src/components/AuthenticationPart.vue
index 431a1b0..a9f16d1 100644
--- a/app/src/components/AuthenticationPart.vue
+++ b/app/src/components/AuthenticationPart.vue
@@ -155,7 +155,7 @@ const goBack = () => {
       </p>
       <button
         class="inline-flex justify-center rounded-lg text-sm font-black py-2 mt-3 bg-text-primary text-background w-full"
-        @click="handleSubmit"
+        type="submit"
       >
         <span v-if="isRegister">Sign up</span>
         <span v-else>Log in / Sign up</span>
diff --git a/server/src/middleware/session.js b/server/src/middleware/session.js
index d118bb1..8822b4c 100644
--- a/server/src/middleware/session.js
+++ b/server/src/middleware/session.js
@@ -10,8 +10,8 @@ export default session({
   rolling: true,
   cookie: {
     httpOnly: true,
-    secure: config.isProduction,
-    sameSite: 'strict',
+    secure: false,
+    sameSite: 'lax',
     maxAge: config.sessionMaxAge,
   },
   store: MongoStore.create({