feat: add CHIPS (partitioned) cookies

ory · Mar 1, 2024 · 282dedb · 282dedb
1 parent 0421fda
commit 282dedb
Show file tree

Hide file tree

Showing 4 changed files with 362 additions and 0 deletions.
diff --git a/consent/strategy_default.go b/consent/strategy_default.go
@@ -322,6 +322,7 @@ func (s *DefaultStrategy) revokeAuthenticationCookie(w http.ResponseWriter, r *h
 	cookie.Options.Path = s.c.SessionCookiePath(ctx)
 	cookie.Options.SameSite = s.c.CookieSameSiteMode(ctx)
 	cookie.Options.Secure = s.c.CookieSecure(ctx)
+	cookie.Options.Secure = s.c.CookieSecure(ctx)
 	cookie.Options.Domain = s.c.CookieDomain(ctx)
 	cookie.Options.MaxAge = -1
 

diff --git a/driver/config/provider.go b/driver/config/provider.go
@@ -62,6 +62,7 @@ const (
 	KeyCookieSameSiteLegacyWorkaround            = "serve.cookies.same_site_legacy_workaround"
 	KeyCookieDomain                              = "serve.cookies.domain"
 	KeyCookieSecure                              = "serve.cookies.secure"
+	KeyCookiePartitioned                         = "serve.cookies.partitioned"
 	KeyCookieLoginCSRFName                       = "serve.cookies.names.login_csrf"
 	KeyCookieConsentCSRFName                     = "serve.cookies.names.consent_csrf"
 	KeyCookieSessionName                         = "serve.cookies.names.session"
@@ -290,6 +291,13 @@ func (p *DefaultProvider) CookieSecure(ctx context.Context) bool {
 	return p.getProvider(ctx).BoolF(KeyCookieSecure, false)
 }
 
+func (p *DefaultProvider) CookiePartitioned(ctx context.Context) bool {
+	if !p.IsDevelopmentMode(ctx) {
+		return false
+	}
+	return p.getProvider(ctx).BoolF(KeyCookiePartitioned, false)
+}
+
 func (p *DefaultProvider) CookieSameSiteMode(ctx context.Context) http.SameSite {
 	sameSiteModeStr := p.getProvider(ctx).String(KeyCookieSameSiteMode)
 	switch strings.ToLower(sameSiteModeStr) {