Merge pull request #3861 from apache/delete-session-cookie-samesite-3.x

Delete session cookie samesite 3.x

Author: rnewson

src/couch/src/couch_httpd_auth.erl

@@ -509,7 +509,7 @@ handle_session_req(#httpd{method = 'DELETE'} = Req, _AuthModule) ->
         "AuthSession",
         "",
         [{path, "/"}] ++
-            cookie_domain() ++ cookie_scheme(Req)
+            cookie_domain() ++ cookie_scheme(Req) ++ same_site()
     ),
     {Code, Headers} =
         case couch_httpd:qs_value(Req, "next", nil) of