Fixed: Set cookie in privateBlogging - Update middleware.js

"Make this site private" - not working in Chrome and Opera Closes TryGhost#17514
joe-blocher · Sep 2, 2023 · acad566 · acad566
1 parent 355a033
commit acad566
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/ghost/core/core/frontend/apps/private-blogging/lib/middleware.js b/ghost/core/core/frontend/apps/private-blogging/lib/middleware.js
@@ -55,7 +55,8 @@ const privateBlogging = {
             name: 'ghost-private',
             maxAge: constants.ONE_MONTH_MS,
             signed: false,
-            sameSite: 'none'
+            sameSite: urlUtils.isSSL(config.get('url')) ? 'none' : 'lax',
+            secure: urlUtils.isSSL(config.get('url'))
         })(req, res, next);
     },