https://bz.apache.org/bugzilla/show_bug.cgi?id=68348

            Bug ID: 68348
           Summary: Support for Partitioned cookie attribute
           Product: Tomcat 9
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: enhancement
          Priority: P2
         Component: Util
          Assignee: dev@tomcat.apache.org
          Reporter: avdl...@solcon.nl
  Target Milestone: -----

It would be helpful if there is a container-wide solution to add the
"Partitioned" attribute to the JSESSIONID cookie.

This is relevant for webapps embedded in IFrames across domains, typically
those which already have CookieProcessor configured for the "SameSite=None"
cookie attribute: starting 2024, Google/Chrome will start phasing out
third-party cookies, see https://developers.google.com/privacy-sandbox/3pcd

See also https://lists.apache.org/thread/f98hm3z7h9z69210zkn6cyg0c9vwjm1s

Support for "Partitioned" could take the form of a new CookieProcessor
attribute, e.g.:

<Context>
   <CookieProcessor sameSiteCookies="None" partitioned="true" />
</Context>

Attribute "partitioned" enables setting the Partitioned attribute:
 - if value is false then the Partitioned attribute won't be set. This is the
default value
 - if value is true then the Partitioned attribute will be set

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to