-
Bug
-
Resolution: Fixed
-
Critical
-
4.1.9, 4.2.6, 4.3.3, 4.4
-
Moodle Apps - 2024 i1.4
Chrome is going to start blocking third-party cookies during 2024.
These cookies are necessary for the app to be able to embed content directly from the Moodle site.
The workaround is to use Partitioned cookies, this will require changes at the LMS level, similar to the ones that recently landed in MDL-80835
More information:
https://developers.google.com/privacy-sandbox/blog/cookie-countdown-2023oct
To reproduce, you'll need to disable 3rd party cookies in your device:
- On your Android device, install Android System WebView Dev.
- Change the default WebView via Developer Options -> WebView Implementation.
- Open the WebView Dev application, and set the webview-force-disable-3pcs to Enabled.
- Launch the app in dev mode with DevTools open (Network tools or Storage -> Cookies tab).
- Browse to Master > [MoodleMobile Testing] > Resource: Page > Page with site internal content embedded (via iframe).
- Auto-login won't launch as the cookie will be blocked (some information will display in the Dev Tools about it).
- caused a regression
-
MDL-81622 \core\session\utility\cookie_helper class uses str_contains which requires PHP 8.0
- Closed
-
MDL-81897 Incorrect handling of partitioned cookies is preventing the mobile app from using the "embedded browser" authentication method.
- Closed
- has a non-specific relationship to
-
MDL-80835 Add CHIPS support to LTI cookies
- Closed
- will help resolve
-
MDL-81414 Provide central API supporting Chrome cookie partitioning (and possibly cookie attributes in general)
- Closed