Skip to content

abp.utils.setCookieValue add parameters for SameSite and Secure #5477

@harlankoehn

Description

@harlankoehn

Currently setCookieValue does not support setting the SameSite or Secure values. Many browsers such as Chromium based browsers are starting to implement SameSite=Lax as the default setting which prevents "third party cookies". What this means is that any application built with ABP that will eventually be used inside an iFrame will have to override abp.utils.setCookieValue in order to make use of this necessary feature. One example of where this is necessary is any web app built with ABP that will be hosted inside Microsoft Teams as a "Teams App" (gets put into an iFrame).

At the present moment, the settings of how Chrome will operate in the future can be configured using Chrome Flags: "SameSite by default cookies" = Enabled and "Cookies without SameSite must be secure" = Enabled

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions