3 ms·
1st party httponly secure cookies will be erased in seven days. You need the user to manually provide an identifier (i.e. login) to avoid losing everything. T
by dfabulich 7y ago
1st party httponly secure cookies will be erased in seven days.
You need the user to manually provide an identifier (i.e. login) to avoid losing everything.
The user's password safe is now the only non-volatile storage mechanism on Safari.
- johncolanduoni 7y agoThey explicitly say 1st party httponly secure cookies are exempt and are their first recommended alternative.
- shakna 7y ago> 1st party httponly secure cookies will be erased in seven days. httponly cookies can't be set from JS, and the seven day erasure only applies to cookies set from JS. That's why they're the recommended method for keeping a user logged in.