SameSite cookie in Java application

Question

Do you know any Java cookie implementation which allows to set a custom flag for cookie, like SameSite=strict? It seems that javax.servlet.http.Cookie has a str

Answer 1

I tried the listed solutions for using javax.servlet.http.Cookie to set the SameSite=strict attribute, but none of them worked.

However, this way worked for me, using javax.servlet.http.Cookie (JRE 1.8 + JBOSS 7.X) :

Cookie cookie = new Cookie(name, value);
path = path.concat("SameSite=Strict;");
cookie.setPath(path);

That's it. tested on

• Google Chrome Version 81.0.4044.129 (Official Build) (64-bit)
• Microsoft Edge Version 81.0.416.68 (Official build) (64-bit)
• Firefox 75.0 (64-bit)