diff --git a/docs/content/docs/concepts/cookies.mdx b/docs/content/docs/concepts/cookies.mdx index 88eb5fc7f7..cd29a29d3f 100644 --- a/docs/content/docs/concepts/cookies.mdx +++ b/docs/content/docs/concepts/cookies.mdx @@ -9,7 +9,7 @@ Core Better Auth cookies like `session` and `csrf` will follow `betterauth.${coo All cookies are `httpOnly` and `secure` if the server is running in production mode. -### Cross Subdomain Cookies (🧪 Expiremental) +### Cross Subdomain Cookies (🧪 Experimental) Sometimes you may need to share cookies across subdomains. For example, if you have `app.example.com` and `example.com`, and if you authenticate on `example.com`, you may want to access the same session on `app.example.com`. @@ -80,4 +80,4 @@ Untrusted requests without valid tokens will result in a `403` error. You can also disable CSRF token check for all clients by setting `advanced.disableCSRFCheck` option on the server. You should only do this if your framework handles CSRF protection itself. - \ No newline at end of file +