Avatar for Username

Pomoc pśepytaś

Glědajśo se wobšudy pomocy. Njenapominajomy was nigda, telefonowy numer zawołaś, SMS pósłaś abo wósobinske informacije pśeraźiś. Pšosym dajśo suspektnu aktiwitu z pomocu nastajenja „Znjewužywanje k wěsći daś“ k wěsći.

Dalšne informacije

Toś ta nitka jo se archiwěrowała. Pšosym stajśo nowe pšašanje, joli trjebaśo pomoc.

How to detect cookieBehavior=5 (dFPi)?

  • 1 wótegrono
  • 1 ma toś ten problem
  • 2 naglěda
  • Slědne wótegrono wót cor-el

sinimawath
sinimawath
more options

Hello.

Our site has SSO authorization with 2 different domains.

To sync cookies there are 2 ways:

1 - Some kind of iframe hack, to make it hidden for users. 2 - If browser blocks thrid-party cookies (ex. Safari), we can move cookie sync to redirect flow (redirect to auth domain, then to subdomain and so on).

But then, cookie is under dFPI policy(cookieBehavior=5) - it's unclear, are cookies blocked or not.


So we have a bug, at 1 process of cookies sync (iframe) and authorizion is just dropped, every time as cookies sync.


If we had a chance to detect dFPI behavior of FireFox, we would move users to redirect flow.

Is there a way to detect cookieBehavior=5 (dFPi)?

Hello. Our site has SSO authorization with 2 different domains. '''To sync cookies there are 2 ways:''' 1 - Some kind of iframe hack, to make it hidden for users. 2 - If browser blocks thrid-party cookies (ex. Safari), we can move cookie sync to redirect flow (redirect to auth domain, then to subdomain and so on). But then, cookie is under dFPI policy(cookieBehavior=5) - it's unclear, are cookies blocked or not. So we have a bug, at 1 process of cookies sync (iframe) and authorizion is just dropped, every time as cookies sync. If we had a chance to detect dFPI behavior of FireFox, we would move users to redirect flow. Is there a way to detect cookieBehavior=5 (dFPi)?

Wšykne wótegrona (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Try to ask advice at a web development oriented forum.