search

ukwa / w3act

w3act is an annotation and curation tool for building web archive collections
Apache License 2.0
19 stars 6 forks source link

Fix cookie setup #663

Open anjackson opened 3 years ago

anjackson commented 3 years ago

We are seeing this warning:

Cookie “PLAY_SESSION” will be soon rejected because it has the “SameSite” attribute set to “None” or an invalid value, without the “secure” attribute. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite

Would be good to bring this into line with

https://github.com/ukwa/ukwa-services/commit/d0099fb3c6dd03480724eb034a0e5d4a5f6c7a2c

e.g. Path=/act; SameSite=Strict; HttpOnly; Secure; Priority=High;

See the docs on configuration options: https://www.playframework.com/documentation/2.6.x/SettingsSession