Skip to content

Conversation

tobse
Copy link
Contributor

@tobse tobse commented Jul 29, 2020

The samesite-attribute is missing in the configuration-array and the spelling of the config-key 'httpOnly' is deprecated in CookieInterface.

The samesite-attribute is missing in the configuration-array and the spelling of the config-key 'httpOnly' is deprecated.
tobse and others added 4 commits July 29, 2020 19:03
The samesite-attribute is missing in the configuration-array and the spelling of the config-key 'httpOnly' is deprecated.
tobse and others added 2 commits July 29, 2020 19:13
The samesite-attribute is missing in the configuration-array and the spelling of the config-key 'httpOnly' is deprecated.
@othercorey othercorey added this to the 2.x milestone Jul 29, 2020
tobse and others added 2 commits July 31, 2020 08:26
Switched to Cookie::create() to decouple configuration options of the Cookie-Authenticator from the Cookie object.
So you can use the samesite attribute (or what may come in the future) without changing the Cookie Authenticator. As a side effect the spelling is unified (httpOnly vs. httponly).
@tobse
Copy link
Contributor Author

tobse commented Jul 31, 2020

Uhh. I have to fix backwards-compatibility-issues before trying another merge.
CookieAuthenticator uses 'httpOnly' and 'expire' instead of 'httponly' and 'expires' as used in the Cookie Object.
Or how can I handle it?

@ADmad ADmad merged commit 3a86c88 into cakephp:master Jul 31, 2020
@ADmad
Copy link
Member

ADmad commented Jul 31, 2020

CookieAuthenticator uses 'httpOnly' and 'expire' instead of 'httponly' and 'expires' as used in the Cookie Object.

I'll take care of it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants