Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ability to set SameSite policy for userLoggedIn cookie #15100

Merged
merged 2 commits into from
Apr 24, 2024

Conversation

CastawayEGR
Copy link
Contributor

SUMMARY

Add the ability to set the SameSite policy for userLoggedIn cookie. By default this is blank today. This change sets the default to Lax which when not set most modern browser interrupt it as Lax. This adds a new variable that can be set via extra_settings to override this and add the ability to set the SameSite policy to Strict.

ISSUE TYPE
  • Bug, Docs Fix or other nominal change
COMPONENT NAME
  • API
AWX VERSION
awx: 0.1.dev33919+g76b97fb
ADDITIONAL INFORMATION
    - setting: USER_COOKIE_SAMESITE
      value: '''Strict'''

@CastawayEGR
Copy link
Contributor Author

@chrismeyersfsu @TheRealHaoLiu Is the api-test workflow buggy? I run the same tests locally and it passes without issue.

@TheRealHaoLiu
Copy link
Member

rebased and kicked off the test, we had a couple CI failure last week cause by django ansible base

@fosterseth fosterseth merged commit f5f8566 into ansible:devel Apr 24, 2024
21 checks passed
djyasin pushed a commit to djyasin/awx that referenced this pull request Sep 16, 2024
…5100)

* Add ability to set SameSite policy for userLoggedIn cookie

* reformat line for linter
djyasin pushed a commit to djyasin/awx that referenced this pull request Nov 11, 2024
…5100)

* Add ability to set SameSite policy for userLoggedIn cookie

* reformat line for linter
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants