diff --git a/lib/ui.ts b/lib/ui.ts
index 3d7df6a..ca26fb8 100644
--- a/lib/ui.ts
+++ b/lib/ui.ts
@@ -82,7 +82,7 @@ router.post("/login", async ctx => {
   function success(roles, method): void {
     log.method = method;
     const token = jwt.sign({ username, roles }, JWT_SECRET);
-    ctx.cookies.set(JWT_COOKIE, token);
+    ctx.cookies.set(JWT_COOKIE, token, { sameSite: "lax" });
     ctx.body = JSON.stringify(token);
     logger.accessInfo(log);
   }