Merge pull request #319 from Team-SilverTown/fix/auth/#318

Team-SilverTown · Apr 22, 2024 · 69c9b4d · 69c9b4d
2 parents fe0fc0b + caf6d6c
commit 69c9b4d
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/src/middleware.ts b/src/middleware.ts
@@ -121,7 +121,12 @@ export async function middleware(request: NextRequest) {
       const response = NextResponse.redirect(request.url);
       // 쿠키 갱신
       apiClient.setDefaultHeader("Authorization", `Bearer ${newServiceToken}`);
-      response.cookies.set(sessionCookie, newSessionToken);
+      response.cookies.set(sessionCookie, newSessionToken, {
+        httpOnly: true,
+        secure: process.env.NEXTAUTH_URL?.startsWith("https://"),
+        sameSite: "lax",
+      });
+
       // response 뿐만이 아니라 request 에서도 갱신된 쿠키를 바라볼 수 있도록 함
       applySetCookie(request, response);
       return response;