Page 1 of 1

Cookie Use When Site Framed In

Posted: Sat Sep 03, 2022 8:30 am
by caseywhite
Hi,

We have an application written outside of LANSA running on one domain that frames in some WAM pages. The domains do not match. Eg. *.app1.com and *.app2.com. In the latest version of Chrome it appears it enforces that unless the SameSite=none is returned with the Set-Cookie header then the cookie won't be stored and therefore is not passed back to the WAM. This same issue is in Edge. Firefox is okay.

My question is can I modify the Set-Cookie header that is returned by LANSA? If so, how do I do this? If I can't can the framing application do something to tell the browser to accept the cookie and pass it to the WAM?

Re: Cookie Use When Site Framed In

Posted: Thu Sep 08, 2022 7:16 am
by Dino
Hi Casey

If you are running in IBM, have you tried to set the header in the apache configuration (httpd.conf) using the add or append?

https://stackoverflow.com/questions/541 ... figuration

Re: Cookie Use When Site Framed In

Posted: Thu Sep 22, 2022 9:02 am
by caseywhite
Dino. I got it to work using the following Apache config.

Header always edit Set-Cookie ^(.*)$ $1;Secure;SameSite=None

Thanks for your tip.