privacycg / storage-access

The Storage Access API
https://privacycg.github.io/storage-access/
199 stars 26 forks source link

Unable to acccess third party cookies values - SAP Successfactors, SAP BTP, CHIPS #203

Open Madhumitha2000er opened 1 month ago

Madhumitha2000er commented 1 month ago

We are having custom UI5 applications integrated with SAP Successfactors(SF) and hosted in SAP BTP. Users logged into the SF and navigate to UI5 applications. We are trying to implement Cookies Having Independent Partitioned State (CHIPS).

Considering SF as Top level Site A & then we navigate to BTP (another top level site B). As per cookie partitioning, embedded site sets cookie with partitioning state which can be accessible to the top level site, but in our scenario there is no embedded site within a top level site rather we have two different top level sites (“A” as SF & “B” as BTP).

In our case, Cookies that is set by SF for session management is passed to our UI5 application. So what happens is cookies which are acting as First Party Cookies in SF which is turned into Third Party Cookies when we logged into our UI5 application. We are not able to access third party cookie values. Document.cookie is returning only _ga, _gid cookies that is set by google. We are not able to get all the cookies that is set by SF. Is there any way to get all the cookies like (route,JSESSIONID,zsessionid,loginMethodCookieKey,assertingPartyCookieKey,bizxCompanyId,bizxThemeId) which is set by SF?

kingcb11 commented 1 month ago

We are having custom UI5 applications integrated with SAP Successfactors(SF) and hosted in SAP BTP. Users logged into the SF and navigate to UI5 applications. We are trying to implement Cookies Having Independent Partitioned State (CHIPS).

Considering SF as Top level Site A & then we navigate to BTP (another top level site B). As per cookie partitioning, embedded site sets cookie with partitioning state which can be accessible to the top level site, but in our scenario there is no embedded site within a top level site rather we have two different top level sites (“A” as SF & “B” as BTP).

In our case, Cookies that is set by SF for session management is passed to our UI5 application. So what happens is cookies which are acting as First Party Cookies in SF which is turned into Third Party Cookies when we logged into our UI5 application. We are not able to access third party cookie values. Document.cookie is returning only _ga, _gid cookies that is set by google. We are not able to get all the cookies that is set by SF. Is there any way to get all the cookies like (route,JSESSIONID,zsessionid,loginMethodCookieKey,assertingPartyCookieKey,bizxCompanyId,bizxThemeId) which is set by SF?