MDL-81897 tool_mobile: Force partitioned cookies on inapp browser

mackensen · May 14, 2024 · d963e2e · d963e2e
1 parent 462d5f0
commit d963e2e
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/admin/tool/mobile/launch.php b/admin/tool/mobile/launch.php
@@ -75,6 +75,11 @@
     throw new moodle_exception('pluginnotenabledorconfigured', 'tool_mobile');
 }
 
+// If the user is using the inapp (embedded) browser, we need to set the Secure and Partitioned attributes to the session cookie.
+if (\core_useragent::is_moodle_app()) {
+    \core\session\utility\cookie_helper::add_attributes_to_cookie_response_header('MoodleSession'.$CFG->sessioncookie, ['Secure', 'Partitioned']);
+}
+
 require_login(0, false);
 
 // Require an active user: not guest, not suspended.