Skip to content

chore: add custom samesite options to auth cookies #16885

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 11 commits into from
Apr 8, 2025

Conversation

Emyrk
Copy link
Member

@Emyrk Emyrk commented Mar 11, 2025

Allows controlling samesite cookie settings.

This has been reported to be required to get embedding Coder app into an iframe to work. The use case has coder on coder.domain.com and the external app on app.coder.com with path based apps.

This PR was verified to resolve the issue. This option is configurable via a deployment flag option.

External fork: Labelbox@8737520

@Emyrk Emyrk force-pushed the stevenmasley/secure_and_samesite branch from a3c3687 to 096187a Compare March 13, 2025 14:36
@github-actions github-actions bot added the stale This issue is like stale bread. label Mar 21, 2025
@github-actions github-actions bot closed this Mar 24, 2025
@Emyrk Emyrk reopened this Mar 25, 2025
@github-actions github-actions bot removed the stale This issue is like stale bread. label Mar 26, 2025
@Emyrk Emyrk force-pushed the stevenmasley/secure_and_samesite branch from 399f8a3 to 7542e5a Compare April 7, 2025 21:22
@Emyrk Emyrk marked this pull request as ready for review April 7, 2025 21:23
@Emyrk Emyrk force-pushed the stevenmasley/secure_and_samesite branch from 11bb888 to 90758f5 Compare April 8, 2025 18:07
@Emyrk Emyrk requested a review from aslilac April 8, 2025 18:10
@Emyrk Emyrk merged commit f2d24bc into main Apr 8, 2025
39 of 41 checks passed
@Emyrk Emyrk deleted the stevenmasley/secure_and_samesite branch April 8, 2025 21:39
@github-actions github-actions bot locked and limited conversation to collaborators Apr 8, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants