Support for Cookies Having Independent Partitioned State (CHIPS)

[JonLatane]

Steps to reproduce

Chrome and other browsers are phasing out third-party cookies. Many embedding applications that rely on them will need CHIPS support, as documented here: https://developer.mozilla.org/en-US/docs/Web/Privacy/Partitioned_cookies. The tl;dr is that we need to be able to add Partitioned; into our Set-Cookie headers. We already have same_site and secure cookie options that work like this (secure is, in fact, identical).

The nearest I've found documentation on this is here: https://github.com/rails/rails/blob/main/actionpack/lib/action_dispatch/middleware/cookies.rb#L184 But I'm not quite sure where the cookies are actually converted into a header string, so not clear on how to add CHIPS support.

Expected behavior

Adding partitioned: true to an ActionDispatch cookie header hash, as described above, should add Partitioned; to the resulting Set-Cookie header string.

Actual behavior

Adding partitioned: true to an ActionDispatch cookie header hash does nothing.

System configuration

Rails version: 7.0.4

Ruby version: 3.1.3

[lohithmv019]

we are also facing the same issue. Need a patch similar to the one we had during the "same_site" cookie implementation.

[lssachin]

We do have the same issue, and chrome is going to deprecate third-party cookies for 1% of Chrome users globally starting Q1 2024

https://privacysandbox.com/open-web/#the-privacy-sandbox-timeline
https://developers.google.com/privacy-sandbox/3pcd

[zzak]

Related: rack/rack#2131

We reserve GitHub Issues for bug reports, and this is a feature request, please start a discussion on the forum. 🙇