design : 필터에서 갱신해주는 accessToken에 도메인 적용

kyumho · Feb 2, 2024 · ac8087b · ac8087b
1 parent 41971e0
commit ac8087b
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/src/main/java/com/ll/medium/user/security/JwtAuthenticationFilter.java b/src/main/java/com/ll/medium/user/security/JwtAuthenticationFilter.java
@@ -44,8 +44,9 @@ protected void doFilterInternal(HttpServletRequest request, HttpServletResponse
                 ResponseCookie newAccessTokenCookie = ResponseCookie.from("accessToken", newAccessToken)
                         .httpOnly(true)
                         .path("/")
+                        .domain(".llcode.me")
                         .secure(true)
-                        .sameSite("None") // SameSite 설정
+                        .sameSite("Strict") // SameSite 설정
                         .build();
 
                 response.addHeader("Set-Cookie", newAccessTokenCookie.toString());