Hi Stephen, Discourse sets all cookies to SameSite=lax. So you don’t need to do anything
The issue in the original post by @nolo was fixed back in April by this commit.
It is technically possible to vary the SameSite value of server-set cookies by changing the hidden same_site_cookies
setting via the console. But we strongly advise against it - picking other values will either cause functional issues or security issues.