fix cookies

.gitignore

@@ -1,2 +1 @@
 data
-conf/ldap/ldap.env

conf/ldap/ldap.env

@@ -7,3 +7,4 @@ LDAP_FILTER="(&)"
 LDAP_UID="cn"
 
 HTTP_HOST=auth.example.com
+COOKIE_DOMAIN=example.com

src/web/helpers/auth.php

@@ -13,13 +13,18 @@ function get_cookie() {
 
 function store_cookie($key) {
 	$cookie_name = 'X-LDAP-Auth-Key';
+	$cookie_options = array (
+         'expires' => time() + 60*60*24*30,
+         'path' => '/',
+		 'domain' => getenv("COOKIE_DOMAIN"),
+		 'secure' => true,
+		 'httponly' => true,
+		 'samesite' => 'None'
+    );
 	setcookie(
 		$cookie_name,
 		$key,
-		time() + (86400 * 30),
+		$cookie_options
-		"/",
-		TRUE,
-		TRUE
 	);
 }