Cookie Use When Site Framed In

[caseywhite]

Hi,

We have an application written outside of LANSA running on one domain that frames in some WAM pages. The domains do not match. Eg. *.app1.com and *.app2.com. In the latest version of Chrome it appears it enforces that unless the SameSite=none is returned with the Set-Cookie header then the cookie won't be stored and therefore is not passed back to the WAM. This same issue is in Edge. Firefox is okay.

My question is can I modify the Set-Cookie header that is returned by LANSA? If so, how do I do this? If I can't can the framing application do something to tell the browser to accept the cookie and pass it to the WAM?

[Dino]

Hi Casey

If you are running in IBM, have you tried to set the header in the apache configuration (httpd.conf) using the add or append?

https://stackoverflow.com/questions/541 ... figuration

[caseywhite]

Dino. I got it to work using the following Apache config.

Header always edit Set-Cookie ^(.*)$ $1;Secure;SameSite=None

Thanks for your tip.