search

ubc / lti-shim

Other
1 stars 0 forks source link

Potential SameSite cookie issue #2

Closed ionparticle closed 4 years ago

ionparticle commented 4 years ago

There is chatter that the SameSite cookie change might impact LTI implementations. They're working on releasing an official statement.

We will need to test in Chrome with the appropriate flags on to see if this is an issue.

ionparticle commented 4 years ago

Ended up not using cookies for LTI, using encrypted JWT to pass the session id using the state variables 'state' and 'lti_message_hint'.