remove http only

services/users/users.go

@@ -43,11 +43,13 @@ func Login(c echo.Context) (err error) {
 	}
 
 	c.SetCookie(&http.Cookie{
-		Name:    "accessToken",
+		Name:     "accessToken",
-		Value:   _token,
+		Value:    _token,
-		Path:    "/",
+		Path:     "/",
-		MaxAge:  31536000,
+		MaxAge:   31536000,
-		Expires: time.Now().Add(24 * time.Hour),
+		Expires:  time.Now().Add(24 * time.Hour),
+		Secure:   true,
+		SameSite: 4,
 	})
 
 	return c.JSON(http.StatusOK, u)