diff --git a/config/initializers/session_store.rb b/config/initializers/session_store.rb index 02b958a7..cdb63852 100644 --- a/config/initializers/session_store.rb +++ b/config/initializers/session_store.rb @@ -5,7 +5,9 @@ # The key base was updated as part of 2.3 if Rails.configuration.loadbalanced_configuration Rails.application.config.session_store :cookie_store, key: '_greenlight-2_3_session', - domain: ENV['GREENLIGHT_SESSION_DOMAIN'] || 'blindside-dev.com' + domain: ENV['GREENLIGHT_SESSION_DOMAIN'] || 'blindside-dev.com', + secure: ENV['COOKIES_SECURE_OFF'].blank?, + same_site: ENV['COOKIES_SAME_SITE'].presence || 'None' else Rails.application.config.session_store :cookie_store, key: '_greenlight-2_3_session' end