Forum Discussion

lorenze's avatar
lorenze
Icon for Altocumulus rankAltocumulus
Jul 09, 2020

Set Cookie SameSite = None

Hello Cool People.   I'm fairly new to F5 and was wondering if there is an easy way to set the SameSite Cookie attribute to "None". I did look at the F5 irule article and don't quite understand t...
application delivery
BIG-IP
cookie.
iRules
samesite
security
lorenze's avatar
lorenze
Icon for Altocumulus rankAltocumulus
Jul 09, 2020

Tried creating an irule with the following entry but all doesnt seem to address the issue:

when HTTP_RESPONSE {
	set COOKIE_VAL [HTTP::header values "Set-Cookie"]
	HTTP::header remove "Set-Cookie"
 
	foreach COOKIE_NAME $COOKIE_VAL {
		HTTP::header insert "Set-Cookie" "${COOKIE_NAME}; SameSite=none"
                HTTP::cookie secure ${COOKIE_NAME} enable
	}
}
when HTTP_RESPONSE {
 
        HTTP::header replace Set-Cookie "[HTTP::header Set-Cookie]; HttpOnly;SameSite=none; Secure"
 
 
 
  }

Appreciate any response. Thank You!