3 ms·
Sure and that is how we do SSO (though SameSite=Strict can interfere with that method too). But if that's the recommended approach, why are they providing a st
by cameronh90 6y ago
Sure and that is how we do SSO (though SameSite=Strict can interfere with that method too).
But if that's the recommended approach, why are they providing a standard route to do SSO via an iframe with the Storage Access API? Does that API have any other valid uses that aren't tracking or SSO related?
- deleted 6y ago[deleted]
- pyentropy 6y agoIf the SSO system is legacy and must use cookies, then to request access for cookies you need to call requestStorageAccess() in a frame hosted on the origin, which will open a prompt asking the user to allow such cookie access.