diff --git a/server/src/main/java/com/ilchinjo/mainproject/global/security/filter/JwtAuthenticationFilter.java b/server/src/main/java/com/ilchinjo/mainproject/global/security/filter/JwtAuthenticationFilter.java index f6a0e1c4..67b4dcd3 100644 --- a/server/src/main/java/com/ilchinjo/mainproject/global/security/filter/JwtAuthenticationFilter.java +++ b/server/src/main/java/com/ilchinjo/mainproject/global/security/filter/JwtAuthenticationFilter.java @@ -9,6 +9,7 @@ import lombok.RequiredArgsConstructor; import lombok.SneakyThrows; import lombok.extern.slf4j.Slf4j; +import org.springframework.boot.web.server.Cookie; import org.springframework.http.ResponseCookie; import org.springframework.security.authentication.AuthenticationManager; import org.springframework.security.authentication.UsernamePasswordAuthenticationToken; @@ -58,11 +59,10 @@ protected void successfulAuthentication(HttpServletRequest request, response.setHeader("Authorization", "Bearer " + accessToken); ResponseCookie cookie = ResponseCookie.from("Refresh", refreshToken) - .domain("aroundexercise.com") .maxAge(17 * 24 * 60 * 60) - .path("/") + .path("/auth/") .secure(true) - .sameSite("None") + .sameSite(Cookie.SameSite.STRICT.attributeValue()) .httpOnly(true) .build(); response.setHeader("Set-Cookie", cookie.toString());