Browsers default Path= to the directory part of the request URI.

This change makes the identity cookie available throughout `/api`.

1 files changed, 1 insertions, 0 deletions

diff --git a/src/login/extract.rs b/src/login/extract.rs
index 542f879..5ef454c 100644
--- a/src/login/extract.rs
+++ b/src/login/extract.rs
@@ -35,6 +35,7 @@ impl IdentityToken {
     pub fn set(self, secret: &str) -> Self {
         let identity_cookie = Cookie::build((IDENTITY_COOKIE, String::from(secret)))
             .http_only(true)
+            .path("/api/")
             .permanent()
             .build();