Play Framework
Replies: 2 comments 2 replies
-
|
If this is just about adding |
Beta Was this translation helpful? Give feedback.
-
|
Maybe we should make it a bit more flexible which attributes we allow to set to the session/flash/... and custom cookies by allowing to pass a list of strings and also support that in the config, so we don't have to make breaking changes to the cookie api in future and devs can just add they own attributes if they desire. |
Beta Was this translation helpful? Give feedback.
-
|
Hi, Is there any plan to have CHIPS support with the "Partitioned" attribute in the next Play 2.9.x and 3.0.x releases ? CHIPS seems to become the standard for the move about blocking of 3rd party cookie in browsers. Chrome and Edge already support it, and it's nightly in Firefox. Otherwise any proposition how to achieve this ? |
Beta Was this translation helpful? Give feedback.
-
|
Definitely not for 2.9.x and 3.0.x, but see |
Beta Was this translation helpful? Give feedback.
-
I have recently been checking our Play app's compliance with the upcoming change Google is planning to block 3rd party cookies / partition those cookies to the top level domain.
We have an application that is embedded within a site as an iframe on a different top level domain which needs to set cookies, however under Googles proposed model (CHIPS) we will need to add a 'Partitioned' attribute to the Set-Cookie header.
I've checked the Play documentation and implementation and I cannot see any simple way of adding this in the current model.
I have implemented a workaround by injecting a overridden version of the CookieHeaderEncoding class into my application, however this is not ideal.
Are there any plans to add this flag to the Cookie class / configuration in an upcoming release? Or is there a cleaner way to add additional flags to the Set-Cookie response?
Beta Was this translation helpful? Give feedback.
All reactions