make cookies SameSite=strict in the hopes that safari will start sending them

TES/tes/apiendpoints.py

@@ -475,7 +475,7 @@ class CreateTunnel(Resource):
                    localbind=localbind, authtok=authtok)
         response = make_response("")
         response.mime_type = 'application/json'
-        response.set_cookie('twsproxyauth', authtok, httponly=True)
+        response.set_cookie('twsproxyauth', authtok, httponly=True,samesite='Strict')
         logger.debug('JobConnect.connect: connecting via redirect with cookie authtok set to  {}'.format(authtok))
         return response
 

TWS/twsproxy/__init__.py

@@ -94,7 +94,7 @@ class TWSProxy(threading.Thread):
         initshutdown.clear()
         (header, bytessofar) = self.inittws(initshutdown)
         if self.authtok is not None:
-            replyheader = b'Set-Cookie: twsproxyauth2='+self.authtok+b' ; HttpOnly\r\n'
+            replyheader = b'Set-Cookie: twsproxyauth2='+self.authtok+b' ; HttpOnly; SameSite=Strict\r\n'
         else:
             replyheader = None
         insertafter = b'HTTP/1.1 200 OK\r\n'