From 4d36140303a7fa340be896103701e49449571288 Mon Sep 17 00:00:00 2001
From: Sebastian Rindom <skrindom@gmail.com>
Date: Sat, 22 Aug 2020 16:46:30 +0200
Subject: [PATCH] Only enforce samesite none in production

---
 packages/medusa/src/loaders/express.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/medusa/src/loaders/express.js b/packages/medusa/src/loaders/express.js
index 79574ae4cf..a07498ab88 100644
--- a/packages/medusa/src/loaders/express.js
+++ b/packages/medusa/src/loaders/express.js
@@ -27,7 +27,7 @@ export default async ({ app }) => {
       proxy: true,
       secret: config.cookieSecret,
       cookie: {
-        sameSite: "none",
+        sameSite: process.env.NODE_ENV === "production" ? "none" : false,
         secure: process.env.NODE_ENV === "production",
         maxAge: 10 * 60 * 60 * 1000,
       },