SameSite Cookie & Shopify Apps
With the release of Chrome 80 on February 4th, 2020, the default behaviour of Chrome will change from allowing cookies in a cross-site or third-party context to denying them, unless specific attributes are included as a part of the cookie. The new version of Google Chrome will be blocking 3rd party cookies, and hence breaks lots of Shopify apps. In May 2019 Google announced that cookies that do not include the "SameSite=None" and Secure" labels will not be accessible by any third parties, in Chrome version 80 and further. The Secure label means cookies need to be set and read via HTTPS connections. SameSite prevents the browser from sending this cookie along with cross-site requests. The main goal is mitigate the risk of cross-origin information leakage. It also provides some…






