Cookies with iframe: SameSite = None not working on server

user_4909721 0
Viewed 1340

I am working on an ASPX page which works with iFrame. After chrome v80 upgrade the site was not working. I made below changes in ASP.NET .cs page to set samesite attribute.

Now the fix is working on my DEV and UAT servers. But it still failing in PROD servers. Below are the screen shot of cookies from UAT and PROD. Whereas the same code is deployed on both the servers.

Please provide possible root cause, looks like cookies attribute is getting overwrite.

Code:

HttpCookie cookie = Cookie.CreateCookie(a_sAuthenticationGuid, a_objContext, uData.SUID);
cookie.SameSite = SameSiteMode.None;
cookie.Secure = true;

PROD: PROD Cookies snapshotPROD Cookies snapshot

UAT: UAT Cookies snapshotUAT Cookies snapshot

samesite google-chrome iframe cookies
2 Answers

I had the same issue and resolved via doing below. You can check the prod server updates and mainly update .NetFramework with the latest patches.

user_153672000

I had to change the samesite setting in chrome to get this resolved and after updating chrome setting for samesite, its working. search for samesite on cookies://flags

user_153672000
Related