Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Shopify Customer Account Page uses 3rd Party Cookies #1772

Closed
osseonews opened this issue Feb 17, 2024 · 1 comment
Closed

Shopify Customer Account Page uses 3rd Party Cookies #1772

osseonews opened this issue Feb 17, 2024 · 1 comment

Comments

@osseonews
Copy link

What is the location of your example repository?

No response

Which package or tool is having this issue?

Hydrogen

What version of that package or tool are you using?

latest

What version of Remix are you using?

latest

Steps to Reproduce

Use the new Customer Account API in a Remix app to login in a customer, and if successful you are redirected to your Login page on Shopify at: https://shopify.com/{USERSTOREID}/auth/. If you look at Chrome browser you will see a warning that the page uses third-party cookies from https://api.hcaptcha.com/authenticate, with the warning: Cookies with the SameSite=None; Secure and not Partitioned attributes that operate in cross-site contexts are third-party cookies. In future Chrome versions, setting third-party cookies will be blocked.

Expected Behavior

This page should work without 3rd party cookies or set the cookies correctly.

Actual Behavior

Shopify Auth page is not compliant with 3rd party cookies in a cross-site context.

@michenly
Copy link
Contributor

michenly commented Feb 20, 2024

Hi osseonews, thank you for raising your concern. It had been brought up with the appropriate team and noted there are already work planned to address this ahead of the third-party cookie deprecation.

It should not affect Hydrogen users at this moment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants