diff --git a/crates/service/storyteller_web/src/http_server/endpoints/flags/design_refresh_flag/build_design_refresh_cookie.rs b/crates/service/storyteller_web/src/http_server/endpoints/flags/design_refresh_flag/build_design_refresh_cookie.rs index f57075ec29..379766c510 100644 --- a/crates/service/storyteller_web/src/http_server/endpoints/flags/design_refresh_flag/build_design_refresh_cookie.rs +++ b/crates/service/storyteller_web/src/http_server/endpoints/flags/design_refresh_flag/build_design_refresh_cookie.rs @@ -9,6 +9,7 @@ pub fn build_design_refresh_cookie(server_state: &ServerState, enable: bool) -> Cookie::build(REFRESH_COOKIE_NAME, value) .domain(&server_state.env_config.cookie_domain) .secure(server_state.env_config.cookie_secure) // HTTPS-only + .path("/") .http_only(false) // This is meant to be exposed to Javascript! .permanent() }