Can I set idsrv.session cookie to SameSite=Strict?

[mgh9]

No description provided.

[mkeskes]

Check this PR#4711
var identityServerBuilder = services.AddIdentityServer(options =>
{
options.Authentication.CheckSessionCookieSameSiteMode = SameSiteMode.Strict;
})

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
Questions are community supported only and the authors/maintainers may or may not have time to reply. If you or your company would like commercial support, please see here for more information.

[joshua5822]

Is there any solution if you are still on asp.net core 2.x? The latest package points to asp.net core 3.x, so the property for setting this doesn't exist.

[joshua5822]

Never mind. I realized I could extend the DefaultUserSession and override the CreateSessionIdCookieOptions method to setup my own value for samesite. Then just needed to set DI for the IUserSession to my new implementation.

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.
Questions are community supported only and the authors/maintainers may or may not have time to reply. If you or your company would like commercial support, please see here for more information.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.