@okta/okta-auth-js - npm Package Compare versions

Comparing version 2.12.0 to 2.12.1

CHANGELOG.md

 # Changelog
 
+## 2.12.1
+
+### Bug Fixes
+
+- [#319](https://github.com/okta/okta-auth-js/pull/319) - Setting 'SameSite=lax' for all cookies (Fix for Firefox/Safari)
+
 ## 2.12.0
@@ -4,0 +10,0 @@

lib/browser/browserStorage.js

@@ -73,3 +73,3 @@ /*!
   var secure = options.secure; // currently opt-in
-  var sameSite = options.sameSite || 'strict'; // token storage should only be accessed by javascript
+  var sameSite = options.sameSite || 'lax';
   return {
@@ -76,0 +76,0 @@ getItem: storageUtil.storage.get,

lib/oauthUtil.js

@@ -81,3 +81,4 @@ /*!
 function getWellKnown(sdk, issuer) {
-  return http.get(sdk, (issuer || sdk.options.url) + '/.well-known/openid-configuration', {
+  var authServerUri = (issuer || sdk.options.issuer || sdk.options.url);
+  return http.get(sdk, authServerUri + '/.well-known/openid-configuration', {
     cacheResponse: true
@@ -84,0 +85,0 @@ });

lib/token.js

@@ -647,3 +647,3 @@ /*!
       }), null, {
-        sameSite: 'strict' // accessed by javascript in parseFromUrl()
+        sameSite: 'lax'
       });
@@ -653,3 +653,3 @@
       cookies.set(constants.REDIRECT_NONCE_COOKIE_NAME, oauthParams.nonce, null, {
-        sameSite: 'lax' // accessed by server from redirect
+        sameSite: 'lax'
       });
@@ -659,3 +659,3 @@
       cookies.set(constants.REDIRECT_STATE_COOKIE_NAME, oauthParams.state, null, {
-        sameSite: 'lax' // accessed by server from redirect
+        sameSite: 'lax'
       });
@@ -662,0 +662,0 @@

package.json

 {
   "name": "@okta/okta-auth-js",
   "description": "The Okta Auth SDK",
-  "version": "2.12.0",
+  "version": "2.12.1",
   "homepage": "https://github.com/okta/okta-auth-js",
@@ -71,5 +71,5 @@ "license": "Apache-2.0",
   "okta": {
-    "commitSha": "9355356e44369b8cc39fdbceea11502742774c2f",
-    "fullVersion": "2.12.0-20200117222407-9355356"
+    "commitSha": "a97fc3a33453c71fa0578fa019e91f8f3cd2da9c",
+    "fullVersion": "2.12.1-20200123003811-a97fc3a"
   }
 }

No alert changes

Improved metrics

Lines of code

3491

increased by0.03%

Worsened metrics

Total package byte prevSize

795850

decreased by-0.02%

No dependency changes