From 7a4d1bf465d36987350e2fb19218210c8b2a73a2 Mon Sep 17 00:00:00 2001
From: Jan <jan.weber@avatic.de>
Date: Sat, 25 Oct 2025 17:16:11 +0200
Subject: [PATCH] Added `same-site` attribute for session cookies and updated
 `application.properties`.

---
 src/main/resources/application.properties | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/src/main/resources/application.properties b/src/main/resources/application.properties
index 1651e9d..5ddd805 100644
--- a/src/main/resources/application.properties
+++ b/src/main/resources/application.properties
@@ -1,4 +1,5 @@
 spring.profiles.active=${SPRING_PROFILES_ACTIVE}
+
 spring.application.name=lcc
 spring.datasource.url=jdbc:mysql://localhost:3306/${DB_DATABASE}
 spring.datasource.username=${DB_USER}
@@ -23,5 +24,8 @@ spring.flyway.enabled=true
 spring.flyway.locations=classpath:db/migration
 spring.flyway.baseline-on-migrate=true
 spring.sql.init.mode=never
+
+# stuff for nginx
 server.forward-headers-strategy=native
 server.servlet.session.cookie.secure=true
+server.servlet.session.cookie.same-site=lax