diff --git a/app/controllers/auth.controller.js b/app/controllers/auth.controller.js index 4ebbe7b..72b6fdb 100644 --- a/app/controllers/auth.controller.js +++ b/app/controllers/auth.controller.js @@ -108,9 +108,10 @@ exports.login = async (req, res) => { //logout exports.logout = (req, res) => { try{ + const isProd = process.env.NODE_ENV === "production"; res.clearCookie("auth_token", { httpOnly: true, - secure: process.env.NODE_ENV === "production", + secure: isProd, sameSite: isProd ? "none" : "lax", });