Skip to content
This repository was archived by the owner on Oct 6, 2026. It is now read-only.

Default cookie setter in OAuth is not setting samesite = None #352 - #353

Closed
Kudze wants to merge 1 commit into
Shopify:mainfrom
Kudze:main
Closed

Kudze wants to merge 1 commit into
Shopify:mainfrom
Kudze:main

Conversation

@Kudze

@Kudze Kudze commented Jul 1, 2024 •

Copy link
Copy Markdown

WHY are these changes introduced?

Fixes #352

For context read the issue I created.

WHAT is this pull request doing?

Basically sets samesite=none for cookies created in OAuth2.

Type of change

  • Patch: Bug (non-breaking change which fixes an issue)
  • Minor: New feature (non-breaking change which adds functionality)
  • Major: Breaking change (fix or feature that would cause existing functionality to not work as expected)

Checklist

  • I have added a changelog entry, prefixed by the type of change noted above
  • I have added/updated tests for this change
  • I have updated the documentation for public APIs from the library (if applicable)

@Kudze

Kudze commented Jul 1, 2024

Copy link
Copy Markdown
Author

I have signed the CLA!

@matteodepalo

Copy link
Copy Markdown
Contributor

Wouldn't this make cookies 3rd party cookies? If so I'm not sure we want them as browser will start block them.

@Suleimanlatrsh

Copy link
Copy Markdown
Contributor

Thanks for contributing! This package is deprecated and we're archiving this repo, so we're closing all open issues and PRs. Please use shopify-app-php instead, and open new issues there. More context: Rethinking support for PHP/Python packages

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Default cookie setter in OAuth is not setting samesite = None

3 participants