Support the "Partitioned" cookie attribute #10891
Labels
Comments
|
Looks like the Cookie spec RFC6265 is being updated to handle some of the new things that this https://datatracker.ietf.org/doc/draft-ietf-httpbis-rfc6265bis/ |
sbordet
added a commit
that referenced
this issue
Nov 17, 2023
Added support in oej.http.HttpCookie. Bridged support for Servlet cookies via the cookie Comment attribute. Signed-off-by: Simone Bordet <[email protected]>
sbordet
added a commit
that referenced
this issue
Nov 19, 2023
Added support in oej.http.HttpCookie. Bridged support for Servlet cookies via the cookie Comment attribute. Signed-off-by: Simone Bordet <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Jetty version(s)
10+
Enhancement Description
A proposal for a new cookie attributed called
Partitionedis underway, with plans from Chrome and Firefox to support it in the near future.See https://developer.mozilla.org/en-US/docs/Web/Privacy/Partitioned_cookies (and related links).
This is a server-side only change, as
HttpClientdoes not have the concept of a "top-level context" (i.e. a web page) under which other requests are made, and the current behavior of the client-sideHttpCookieStoreis equivalent toSameSite=Strict, i.e. cookies set by a domain are only sent with requests for the same domain.The text was updated successfully, but these errors were encountered: