-
Notifications
You must be signed in to change notification settings - Fork 681
Open
Labels
Description
Are you looking for help?
From Google Chrome 80, they are planning to released from february, 2020, they will force SameSite=None for all Cookies if we want to use for third-party context. If no SameSite is set, then Chrome will understand as SameSite=Lax. It seems to be reversed the result as before (SameSite=None by default). Please see: https://www.chromium.org/updates/same-site
Therefore, we need to update our cookies with declarative setting SameSite from Playframework Controller.
Play Version (1.5.x / etc)
Playframework 1.5.x
Expected Behavior
- Support SameSite enum inside the Http.Cookie
- SameSite enum supports three values: Strict, Lax and None
miller11, kiennguyen and richmar10