Update api/routers/auth.py

api/routers/auth.py

@@ -107,17 +107,13 @@ async def login(
     token = create_session(username)
     
     # Set secure cookie
-    # In development (HTTP), use lax samesite and secure=False
-    # In production (HTTPS), use none samesite and secure=True
-    is_production = os.getenv("ENVIRONMENT", "development") == "production"
-    
     response.set_cookie(
         key="session_token",
         value=token,
         httponly=True,
         max_age=SESSION_MAX_AGE,
-        samesite="none" if is_production else "lax",
-        secure=is_production  # Only secure in production with HTTPS
+        samesite="none",
+        secure=True  # Required for SameSite=None
     )
     
     logger.info(f"Successful login for user: {username}")
@@ -175,4 +171,4 @@ async def status(session_token: Optional[str] = Cookie(None)):
     return {
         "authenticated": session_data is not None,
         "username": session_data.get("username") if session_data else None
-    }
+    }