starred/pocket-id-pocket-id-1
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2025-12-09 14:53:00 +03:00
Code Issues 122 Packages Projects Releases 10 Wiki Activity

🚀 Feature: Support SameSite cookie attribute #287

New Issue
Closed
opened 2025-10-08 00:01:45 +03:00 by OVERLORD · 2 comments
OVERLORD commented 2025-10-08 00:01:45 +03:00
Owner
Copy Link

Originally created by @adrianmace on GitHub.

Feature description

I want the ability for the session cookie to be set to SameSite: Lax so that I can authenticate to multiple sub-domains with a single request.

Pitch

In my use-case, I run multiple services behind a single sub-domain (*.something.example.com) and reverse proxy (Traefik). The result is app-1.something.example.com and app-2.something.example.com.

Currently Traefik intercepts all requests and authenticates them via Pocket-ID before processing the request further. This works, but authentication is happening once for each app/sub-domain I hit.

I want to authenticate once and have that persist for every app under the same sub-domain. This could be the default behaviour or an optional thing.

In Authentik SameSite: Lax is default behaviour, along with a 1 month cookie expiry time.

Originally created by @adrianmace on GitHub. ### Feature description I want the ability for the session cookie to be set to SameSite: Lax so that I can authenticate to multiple sub-domains with a single request. ### Pitch In my use-case, I run multiple services behind a single sub-domain (`*.something.example.com`) and reverse proxy (Traefik). The result is `app-1.something.example.com` and `app-2.something.example.com`. Currently Traefik intercepts all requests and authenticates them via Pocket-ID before processing the request further. This works, but authentication is happening once for each app/sub-domain I hit. I want to authenticate once and have that persist for every app under the same sub-domain. This could be the default behaviour or an optional thing. In Authentik SameSite: Lax **is default behaviour**, along with a 1 month cookie expiry time.
OVERLORD added the feature label 2025-10-08 00:01:45 +03:00
OVERLORD commented 2025-10-08 00:01:47 +03:00
Author
Owner
Copy Link

@adrianmace commented on GitHub:

This relates to #219

@adrianmace commented on GitHub: This relates to #219
OVERLORD commented 2025-10-08 00:01:48 +03:00
Author
Owner
Copy Link

@adrianmace commented on GitHub:

This is being set on my OIDC plugin for Traefik. Closing.

@adrianmace commented on GitHub: This is being set on my OIDC plugin for Traefik. Closing.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
breaking
bug
documentation
feature
needs more upvotes
open to pull requests
pull-request
Mirrored from GitHub Pull Request
No Label feature
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
OVERLORD
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/pocket-id-pocket-id-1#287
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?