[Webkit-unassigned] [Bug 196490] Storage Access API: hasStorageAccess does not take into account unvisited state

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=196490

--- Comment #1 from r+webkit at mko.re ---
>From an article on MDN, I get that storage access API may not be expected to work with sites the user hasn't interacted with as a first party site. 

This is quite painful, though: many services (such as learning tools) are embedded as iframes in other websites (such as learning management systems); the user may never interact with these services on a first-party basis, but these services require cookie storage for storing authentication. They're not interested in first-party storage, only iframe-local cookie storage, but since 2.1 (I'm guessing by dropping partitioning), no cookie storage is available at all to these kinds of services anymore until the user has first-party interaction with them.

I was hoping that 'request first party storage' would be a workaround (albeit not very fun for users to always click a button when starting the process), but if you can't rely on that working in an iframe all the time either, this is a problem.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20190402/1e3dde84/attachment-0001.html>