Skip to content
This repository has been archived by the owner on Dec 22, 2023. It is now read-only.

Handle SameSite=None is unsupported by some old browsers #1395

Merged

Conversation

carmenlau
Copy link
Contributor

@carmenlau carmenlau commented May 12, 2020

refs #1368

Tested login in Mac Chrome 60

@carmenlau carmenlau force-pushed the 1368-handle-same-site-none branch 2 times, most recently from 49154c5 to 949d0db Compare May 12, 2020 04:56
@carmenlau carmenlau marked this pull request as ready for review May 12, 2020 04:58
@@ -0,0 +1,115 @@
// SPDX-License-Identifier: Apache-2.0
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's better to name this file and its test file samesite/incompatible.go

// some old browsers
// To avoid writing samesite to the header
// set empty value to Cookie SameSite
// https://golang.org/src/net/http/cookie.go#L220
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just searched and found this issue: golang/go#36990
We may want to include the issue link for completeness.

@carmenlau
Copy link
Contributor Author

Updated @louischan-oursky @kiootic

@louischan-oursky louischan-oursky merged commit 7c8b8d8 into SkygearIO:interaction May 12, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants