Changing Session cookie - samesite v4.6.1

That's weird. On where you put the hack, can you put these lines so we can debug the values?

dd($this->cookie->getSameSite());
dd(config(\Config\Cookie::class)->samesite);

Make sure to remove first your temporary hack then run your code again. You should see the values for the lines above and paste them here.


Okay, here is the output-:

PHP Code:

$this->cookie->getSameSite()  string (3)  "Lax"
config(...)->samesite  string  (3)  "Lax

called from .../Session/Session,php:296  [dd()]  


Thank you. This means to say, although you have set the $samesite property in app/Config/Cookie.php as "None", the instantiated Cookie config class gets the Lax value. Check these places for possible places where the Lax value can be set.

• .env - check if there's a line named "cookie.samesite"
  
• check within your code for use of Registrars that have a public method called Cookie
  

Indeed, in .env cookie.samesite is set to 'Lax'.

Apologies for my oversight, thanks for your help.