Can't set the SameSite cookie attribute in XUI

[maximthomas]

Describe the bug
After successful authentication, OpenAM creates the iPlanetDirectoryPro cookie without the SameSite attribute, despite the -Dorg.openidentityplatform.openam.cookie.samesite property being set.

To Reproduce
Steps to reproduce the behavior:

1. Set the org.openidentityplatform.openam.cookie.samesite property value.
2. Authenticate in XUI.
3. Check the SameSite attribute of the iPlanetDirectoryPro cookie.

Expected behavior
The SameSite attribute of the iPlanetDirectoryPro cookie should match the value of the org.openidentityplatform.openam.cookie.samesite property.

[EkaLinMan]

Hi @maximthomas. I tested the fix with OpenAM 16.0.7-SNAPSHOT, but it seems that iPlanetDirectoryPro is still being created without a SameSite attribute. Could you please have a look when you have a chance? Thank you!

[maximthomas]

Hi @EkaLinMan
I could not reproduce the issue on 16.0.7-SNAPSHOT. Check the org.openidentityplatform.openam.cookie.samesite system property value.
You can also check using the following command:

curl -s http://openam.example.org:8080/openam/json/serverinfo/* | jq .cookieSameSite 
"Strict"