Skip to content

Support SameSite cookie (Strict, Lax, None) #1328

@kiennguyen

Description

@kiennguyen

Are you looking for help?

From Google Chrome 80, they are planning to released from february, 2020, they will force SameSite=None for all Cookies if we want to use for third-party context. If no SameSite is set, then Chrome will understand as SameSite=Lax. It seems to be reversed the result as before (SameSite=None by default). Please see: https://www.chromium.org/updates/same-site
Therefore, we need to update our cookies with declarative setting SameSite from Playframework Controller.

Play Version (1.5.x / etc)

Playframework 1.5.x

Expected Behavior

  1. Support SameSite enum inside the Http.Cookie
  2. SameSite enum supports three values: Strict, Lax and None

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions