Skip to content

chore: add custom samesite options to auth cookies#16885

Merged
Emyrk merged 11 commits into
mainfrom
stevenmasley/secure_and_samesite
Apr 8, 2025
Merged

chore: add custom samesite options to auth cookies#16885
Emyrk merged 11 commits into
mainfrom
stevenmasley/secure_and_samesite

Conversation

@Emyrk
Copy link
Copy Markdown
Member

@Emyrk Emyrk commented Mar 11, 2025

Allows controlling samesite cookie settings.

This has been reported to be required to get embedding Coder app into an iframe to work. The use case has coder on coder.domain.com and the external app on app.coder.com with path based apps.

This PR was verified to resolve the issue. This option is configurable via a deployment flag option.

External fork: Labelbox@8737520

@Emyrk Emyrk force-pushed the stevenmasley/secure_and_samesite branch from a3c3687 to 096187a Compare March 13, 2025 14:36
@github-actions github-actions Bot added the stale This issue is like stale bread. label Mar 21, 2025
@github-actions github-actions Bot closed this Mar 24, 2025
@Emyrk Emyrk reopened this Mar 25, 2025
@github-actions github-actions Bot removed the stale This issue is like stale bread. label Mar 26, 2025
@Emyrk Emyrk force-pushed the stevenmasley/secure_and_samesite branch from 399f8a3 to 7542e5a Compare April 7, 2025 21:22
@Emyrk Emyrk marked this pull request as ready for review April 7, 2025 21:23
@Emyrk Emyrk force-pushed the stevenmasley/secure_and_samesite branch from 11bb888 to 90758f5 Compare April 8, 2025 18:07
@Emyrk Emyrk requested a review from aslilac April 8, 2025 18:10
Comment thread coderd/coderdtest/testjar/cookiejar.go
Comment thread coderd/coderdtest/testjar/cookiejar.go
Comment thread coderd/coderdtest/oidctest/idp.go
@Emyrk Emyrk merged commit f2d24bc into main Apr 8, 2025
@Emyrk Emyrk deleted the stevenmasley/secure_and_samesite branch April 8, 2025 21:39
@github-actions github-actions Bot locked and limited conversation to collaborators Apr 8, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants