vulcand / oxy

Go middlewares for HTTP servers & proxies
Apache License 2.0
2.02k stars 324 forks source link

Add SameSite configuration to CookieOptions #192

Closed mattyb closed 4 years ago

mattyb commented 4 years ago

With Chrome 80 going stable on Feb 4, 3rd party cookies without the SameSite=None setting will be blocked. https://blog.chromium.org/2019/10/developers-get-ready-for-new.html. In our testing, this breaks sticky sessions for services that are iframed into another page.

I think it should be possible to update CookieOptions to allow configuring the SameSite settings.