From 00d6b8f10217670153c53b57ed83453d0f5ffc61 Mon Sep 17 00:00:00 2001 From: Trezy Date: Fri, 20 Mar 2026 07:32:03 -0500 Subject: [PATCH] fix: delete auth redirect cookie before redirecting --- src/auth/routes.rs | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/auth/routes.rs b/src/auth/routes.rs index 161c04b..ebaa218 100644 --- a/src/auth/routes.rs +++ b/src/auth/routes.rs @@ -99,9 +99,11 @@ async fn callback( session_cookie.set_same_site(axum_extra::extract::cookie::SameSite::None); session_cookie.set_secure(true); // Required when SameSite=None - // Remove the redirect cookie + // Remove the redirect cookie (must match attributes from login) let mut redirect_removal = Cookie::from(REDIRECT_COOKIE_NAME); redirect_removal.set_path("/"); + redirect_removal.set_same_site(axum_extra::extract::cookie::SameSite::None); + redirect_removal.set_secure(true); let jar = jar.add(session_cookie).remove(redirect_removal); Ok((jar, Redirect::to(&redirect_url))) -- 2.51.2