# This is the main configuration file for the application.
# ~~~~~

# First, include the base config file which we'll then override later in this file.
include "application"

# Secret key
# ~~~~~
# The secret key is used to secure cryptographics functions.
# If you deploy your application to several instances be sure to use the same key!
play.crypto.secret="<%= @application_secret %>"
play.http.secret.key="<%= @application_secret %>"

# Set session cookies to https only (not set in dev)
session.secure=true

play.akka.actor.retrieveBodyParserTimeout = 30 seconds

# In integration, disable TLS cert validation as the test PDF processing server
# has a self-signed cert.
ws.acceptAnyCertificate=<%= @ws_accept_any_certificate %>

# This is the main configuration file for the application.
# ~~~~~

# First, include the base config file which we'll then override later in this file.
include "application"

# Secret key
# ~~~~~
# The secret key is used to secure cryptographics functions.
# If you deploy your application to several instances be sure to use the same key!
play.crypto.secret="<%= @application_secret %>"
play.http.secret.key="<%= @application_secret %>"

# Set session cookies to https only (not set in dev)
session.secure=true

# Some payment providers send responses using an HTML form which POSTs data
# from the user's browser to Licensing. For this to work, the POST request
# needs to include the session cookie. This means the SameSite attribute on the
# session cookie has to be set to None (rather than the default which is "Lax"
# as of 2021).
#
# https://web.dev/samesite-cookies-explained/
play.http.session.sameSite="None"

play.akka.actor.retrieveBodyParserTimeout = 30 seconds

# In integration, disable TLS cert validation as the test PDF processing server
# has a self-signed cert.
ws.acceptAnyCertificate=<%= @ws_accept_any_certificate %>

Set SameSite=None for licensify frontend
Set SameSite=None for licensify frontend

Some payment providers send responses using an HTML form which POSTs
data  from the user's browser to Licensing. For this to work, the POST
request  needs to include the session cookie. This means the SameSite
attribute on the  session cookie has to be set to None (rather than the
default which is "Lax"  as of 2021).

https://web.dev/samesite-cookies-explained/

Note that this commit only touches the config file for licensify
frontend - licensify-admin and licensify-feed have separate .conf.erb
files in the same directory as this.

This depends on https://github.com/alphagov/licensify/pull/514 which
upgraddes Play to 2.6.25
