Re-generate config.
@@ -32,6 +32,10 @@ workflows_pool_size = 40
[api]
# List of origins allowed for api, auth and stream
allow_origin = http://127.0.0.1:3000 # comma separated list allowed here.
+# SameSite attribute value for the auth-token cookie we set on successful authentication from st2web. Valid values are strict, lax, none, None. If you don't have a specific reason (e.g. supporting old browsers) you are recommended to set this value to strict.
+auth_cookie_same_site = lax
+# True if secure flag should be set for "auth-token" cookie which is set on successful authentication via st2web. You should only set this to False if you have a good reason to not run and access StackStorm behind https proxy.
+auth_cookie_secure = True
# None
debug = False
# StackStorm API server host
