omniauth / omniauth / 39515403922

100%

push

github

Document how SameSite session cookies affect the callback

OmniAuth keeps its state in the Rack session, so the callback fails
when the browser doesn't send the session cookie with the provider's
cross-site redirect or POST. Explain which SameSite settings work and
how to get around SameSite=Strict.

https://github.com/omniauth/omniauth/issues/1149

173 of 173 branches covered (100.0%)

644 of 644 relevant lines covered (100.0%)

42.15 hits per line