search

privacysandbox / privacy-sandbox-dev-support

Discuss your Privacy Sandbox developer questions with the Chrome team.
Apache License 2.0
182 stars 76 forks source link

How will third-party cookie deprecation work for Chrome extensions? #313

Open sebastiansandqvist opened 6 months ago

sebastiansandqvist commented 6 months ago

Given a Chrome extension that uses a cookie for authentication into the extension itself, will third-party cookie deprecation break authentication for the extension?

How will this affect the following:

  1. Requests made by the background script
  2. Requests made by the extension in a Side Panel
  3. Requests made by the extension in content embedded in an arbitrary webpage

From my reading, adding partitioned to the cookie would still result in case 3 (possibly also case 2) being broken.

I've found a related StackOverflow thread about the same issue: https://stackoverflow.com/questions/68610480/chrome-extensions-and-third-party-cookies-alternative

DCtheTall commented 5 months ago

Hey Sebastian, thank you for your feedback and question!

For (1), as far as I am aware, there are no plans to have 3P cookie deprecation impact how background contexts in extensions interact with cookies. An extension's background script will be able to use cookies for any site the extension has permissions. This includes HTTP requests and the chrome.cookies API.

For (2), I assume you mean custom DevTools panels that extensions can add? I myself have implemented a carve out for 3P cookie blocking which exempts these panels from this kind of blocking. If this is not what you mean, please let me know so I can make sure your concern is addressed.

For (3), are you referring to pages that embed an