expressjs / session

Simple session middleware for Express

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[Feature Request] Support of phasing out third-party cookies

nicob-29 opened this issue · comments

Hi
Google plan soon to activate phasing out third-party cookies
See Third-Party Cookies doc: https://privacysandbox.com/open-web/#the-privacy-sandbox-timeline

Doc about phasing out third-party cookies: https://developer.chrome.com/en/docs/privacy-sandbox/third-party-cookie-phase-out/#partitioned-cookies

This feature request requires the possibility to add "Partitioned" to the cookie like Secure.

Hi,
We have the same urgent requirement, do you have any plans/timelines to support Partitioned cookie property?
We tried to workaround but it looks like not there is none.

The implementation is being discussed currently but should be integrated soon.

Hi @dougwilson ,
Any idea when the fix will be available?
Best regards,
Stéphane

Hi,
we also need such support to test partitioned cookies for our sessions.

Hi
Any update ?

@nicob-29
I think it needs to be added to cookie library first, which was done but not released yet
jshttp/cookie#153
Because it's used here:
https://github.com/expressjs/session/blob/master/session/cookie.js#L14

@sergioRozenszajn
jshttp/cookie about partitioned was released (See version 0.6.0)
https://github.com/jshttp/cookie/releases is not good but

image

Thank you, I missed added it to the github releases. There is a long holiday where I am currently, sorry for the delayed reply. I will get out a new release of this with partitioned support asap for you all.

@sergioRozenszajn
The version of cookie was released yesterday ;-)
Thank you @dougwilson

Hi @dougwilson , @nicob-29

In the meantime I forked into https://github.com/sergioRozenszajn/approuter-session.git, using cookie 0.6.0 and adding partitioned to data:
, sameSite: this.sameSite
, partitioned: this.partitioned
Using this fork the JSESSIONID cookie is now partitioned:
image

@dougwilson
Any news ?

Hi @nicob-29 I just got home yesterday and working through the backlog. Please if you can give me a little breather from the holiday to get it done, that would be great.

Sure !

Please start work on this 🙏
Since Chrome will start blocking from beginning of next year it's starting to become very urgent.

Happy New Year
Friendly reminder.

Another request for this to be added soon. Thanks!