Skip to content

Conversation

@Migaroez
Copy link
Contributor

@Migaroez Migaroez commented Dec 4, 2025

Description

Adds tests for all the main handler methods in HideBackOfficeTokensHandler including the cookieprefix permutations introduced in #21056.

This pr is based on #21056 and should be merged in after that one to keep things tidy.

kjac and others added 2 commits December 4, 2025 09:13
The __Host- cookie prefix enforces secure cookies at browser level,
which caused cookies to be rejected when running over HTTP in local
development environments even when UseHttps was set to false.

Cookie names are now calculated per-request based on both the UseHttps
setting and whether the current request is over HTTPS, matching the
logic used for the Secure cookie option.
@kjac
Copy link
Contributor

kjac commented Dec 5, 2025

PR looks good. I left a few comments 😄

I'll refrain from approving until the first PR has been merged and has found its way into main (alternatively we can just change the target branch on this one).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants