3 people ada8ffd3b9 fix: make CSRF cookies accessible in embedded iframe contexts (#23556) ...

- Use SameSite=None for HTTPS and SameSite=Lax for development
- Follows same pattern as reserveSlot handler for embed compatibility
- Fixes 403 errors when cancelling bookings in embedded forms

Co-authored-by: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>

2025-09-03 17:57:00 +00:00

..

route.ts

fix: make CSRF cookies accessible in embedded iframe contexts (#23556)

2025-09-03 17:57:00 +00:00