MDL-81897 tool_mobile: Force partitioned cookies on inapp browser

2024-05-14 13:44:12 +02:00
parent 0fae175b82
commit ab8945d10f
1 changed files with 5 additions and 0 deletions
@@ -75,6 +75,11 @@ if (empty($SESSION->justloggedin) &&
    throw new moodle_exception('pluginnotenabledorconfigured', 'tool_mobile');
 }

+// If the user is using the inapp (embedded) browser, we need to set the Secure and Partitioned attributes to the session cookie.
+if (\core_useragent::is_moodle_app()) {
+    \core\session\utility\cookie_helper::add_attributes_to_cookie_response_header('MoodleSession'.$CFG->sessioncookie, ['Secure', 'Partitioned']);
+}
+
 require_login(0, false);

 // Require an active user: not guest, not suspended.