How to set SameSite=None for my Devise session cookie?

Viewed 11

I'm developing a Chrome Extension that works in conjunction with a rails backend. When users are logged into the backend site, I want to customize the extension UI according to their account. Normal stuff.

Because this is a browser extension, the "document" / URL that requests to the backend will always be changing, so SameSite=None needs to be set.

How can I customize the Devise cookie settings? Everything I found so far online shows me how to set cookie information globally via a rails config:

YourApp::Application.config.session_store :cookie_store, { key: '_xxxx_session', secure: secure_option }

But I think technically I don't need this for every cookie, just the session cookie. I guess I could be wrong though...

Thoughts?

0 Answers
Related