Fix `SameSite` cookie issue for LTI Provider. EW-449
There was an issue where external LMS system (e.g. Canvas, Blackboard) that used Open edX LTI Provider calls had cookies blocked. This update fixes this issue by defining third-party cookies to have attributes of `Secure=True` and `SameSite=None`. Details here: https://discuss.openedx.org/t/lti-xblock-and-samesite/759/5 (cherry picked from commit 28479a2966b87b16a25dbc96c19b6f5817d255de)
Showing
- lms/djangoapps/email_marketing/signals.py 1 addition, 0 deletionslms/djangoapps/email_marketing/signals.py
- lms/envs/common.py 3 additions, 4 deletionslms/envs/common.py
- openedx/core/djangoapps/lang_pref/middleware.py 1 addition, 0 deletionsopenedx/core/djangoapps/lang_pref/middleware.py
- openedx/core/djangoapps/lang_pref/tests/test_middleware.py 1 addition, 0 deletionsopenedx/core/djangoapps/lang_pref/tests/test_middleware.py
- openedx/core/djangoapps/lang_pref/views.py 2 additions, 1 deletionopenedx/core/djangoapps/lang_pref/views.py
- openedx/core/djangoapps/user_authn/views/auto_auth.py 1 addition, 1 deletionopenedx/core/djangoapps/user_authn/views/auto_auth.py
Loading
Please register or sign in to comment