Update src/config.py

src/config.py

@@ -11,8 +11,8 @@ class Settings(BaseSettings):
     JWT_SECRET_KEY: str = "your-jwt-secret-change-in-production"
     JWT_ALGORITHM: str = "HS256"
     ACCESS_TOKEN_EXPIRE_DAYS: int = 7
-    JWT_COOKIE_SECURE: bool = False  # Set to True in production
-    JWT_COOKIE_SAMESITE: str = "lax"  # "lax" | "strict" | "none" (use "none" for cross-site cookies in production)
+    JWT_COOKIE_SECURE: bool = True  # Set to True in production
+    JWT_COOKIE_SAMESITE: str = "none"  # "lax" | "strict" | "none" (use "none" for cross-site cookies in production)
 
     # CORS
     FRONTEND_URL: str = "http://localhost:3000"