fix : 쿠키 httpOnly false

dnd-side-project · Feb 13, 2025 · b02be89 · b02be89
1 parent 5ff8003
commit b02be89
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/api/src/main/java/com/dnd/sbooky/api/security/AuthController.java b/api/src/main/java/com/dnd/sbooky/api/security/AuthController.java
@@ -74,10 +74,10 @@ private void setRefreshTokenCookie(HttpServletResponse response, String refreshT
                 ResponseCookie.from(REFRESH_TOKEN, refreshToken)
                         .secure(true)
                         .sameSite("None")
-                        .httpOnly(true)
+                        .httpOnly(false) // todo : true 로 변경
                         .maxAge(REFRESH_TOKEN_EXPIRE_TIME)
                         //                        .domain(".sbooky.net")
-                        .domain("localhost")
+                        //                        .domain("localhost")
                         .path("/")
                         .build();
         response.addHeader(SET_COOKIE, cookie.toString());