MicrosoftDocs / msteams-docs

Source for the Microsoft Teams developer platform documentation.
https://aka.ms/teamsdev
Creative Commons Attribution 4.0 International
287 stars 509 forks source link

Chrome Third Party Cookies phase-out alternative steps of tab authentication #10291

Closed egm0121 closed 6 months ago

egm0121 commented 9 months ago

Since storage partitioning breaks the current OAuth authentication flows for ms teams apps and browsers will start enforcing partitioned cookies this year, some pointers are needed on how to handle this type of authentication going forward


Document Details

Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

Dinesh-MSFT commented 9 months ago

Hi @egm0121 - Thanks for raising your query. We will check on it and let you know the updates.

Update: We are checking this with engineering team and let you know the updates.

egm0121 commented 8 months ago

@Dinesh-MSFT Thank you for the update!

Dinesh-MSFT commented 8 months ago

Hi @egm0121 - Could you please confirm which app you building/own? We're looking for some apps that are broken by the 3P cookie deprecation so that engineering team will further look into this issue.

egm0121 commented 8 months ago

@Dinesh-MSFT I'm part of the 8x8 team, we have 8x8 Work for Teams Tab app that uses the third party auth flow steps and presents our login page inside the teams sdk created popup. The flow will break with cookie storage partitioning enabled.

Screenshot 2024-02-20 at 9 27 35 AM

8x8 Work App on Teams

Dinesh-MSFT commented 8 months ago

Hi @egm0121, we have the below recommendation from engineering team -

our current recommendation for apps that will be impacted by the 3P cookie deprecation is to apply for the third-party cookie deprecation trial so their apps can be exempt for the rest of this year: https://developers.google.com/privacy-sandbox/3pcd/temporary-exceptions/third-party-deprecation-trial

We will also share updated guidance once we have a solution in place.

egm0121 commented 8 months ago

@Dinesh-MSFT Thanks for the update. I assume the documentation will be updated once you have a compatible solution on your side.

aderici commented 8 months ago

Hi @egm0121 - Could you please confirm which app you building/own? We're looking for some apps that are broken by the 3P cookie deprecation so that engineering team will further look into this issue.

Manifestly Checklists app on the MS Teams App store is a client of mine and i can confirm they seem to be impacted by this change. Currently if i switch to the "new teams" desktop app on a windows machine i can not use the app.

Dinesh-MSFT commented 7 months ago

Hi @aderici - Thanks for raising query. We are checking this with engineering team and let you know the updates.

Update: Engineering team tried using the Manifestly Checklists app in the new Teams client (T2.1) and it works fine for them:

MicrosoftTeams-image (40)

microsoft-github-policy-service[bot] commented 6 months ago

This issue has been automatically marked as stale because it has been marked as requiring author feedback but has not had any activity for 3 days. It will be closed if no further activity occurs within 3 days of this comment.