Opencast needs to change the cookie settings

[tgloeggl]

Opencast needs to facilitate

https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value

Without these changes, LTI WILL break soon completly and is already broken in Strict mode in Firefox! Currently only the folling (maybe iconmplete list) of features are affected:

• Video upload
• Courseware block

These need cookies to work in an iframe and therefore the Partitioned-Attribte and SameSite=None needs to be set for the cookies from Opencast.

[KatrinIhler]

If this is something Opencast needs to do, does it make sense to create an issue there as well?

[pettobia]

What is the current status? @tgloeggl

[mtneug]

I preached this for ages about LTI and yes, Partitioned will be a solution. However, this is currently not implemented in Safari (as mentioned in the MDN Web Docs). See WebKit/standards-positions#50 for a discussion.

[tgloeggl]

I will have to further investigate this issue regarding Safari, but without researching the reasons it a quick test it seems to just work in as of now.