Changing sameSite cookie from Strict to Lax. (#2677)

- Fixes #2666
- Fixes #2601

src/shared/utils/browser/clear-auth-cookie.ts

@@ -4,7 +4,7 @@ import { authCookieName } from "../../config";
 export default function clearAuthCookie() {
   document.cookie = cookie.serialize(authCookieName, "", {
     maxAge: -1,
-    sameSite: true,
+    sameSite: "lax",
     path: "/",
   });
 }

src/shared/utils/browser/set-auth-cookie.ts

@@ -6,7 +6,7 @@ export default function setAuthCookie(jwt: string) {
   document.cookie = cookie.serialize(authCookieName, jwt, {
     maxAge: 365 * 24 * 60 * 60 * 1000,
     secure: isHttps(),
-    sameSite: true,
+    sameSite: "lax",
     path: "/",
   });
 }