[Webkit-unassigned] [Bug 237350] Web App Added to Home Screen Cookies Deleted After 7 Days

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Mar 2 15:14:52 PST 2022


https://bugs.webkit.org/show_bug.cgi?id=237350

--- Comment #5 from ben at ribbongang.com.au ---
Ok, just confirming my understanding, the WebKit policy overrides/caps the expiry setting on all JS script-written cookies, no matter the domain or installed status of the app, to 7 days. So, if I create the auth token cookie from the server-side as HttpOnly and set expiry to say 28 days then this will be honoured? 

Then any other client-side cookies I have I should write this data into my IndexedDB database or localstorage to preserve them as these storage types have no explicit expiry date other than the 7 day non-interaction policy. Is this right? Or will they be preserved beyond 7 days as long as the app is installed to the Home screen?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20220302/513736b3/attachment.htm>


More information about the webkit-unassigned mailing list