Skip to content

Commit 1c88821

Browse files
m6312mrumble
andauthored
Add note to SameSite cookie docs section recommending upgrade to Django >= 3.1 (#267)
* Add note to SameSite cookie docs section recommending upgrade to Django >= 3.1 * Fix wrong word Co-authored-by: mrumble <matt.rumble@linguamatics.com>
1 parent 6ba0ada commit 1c88821

File tree

1 file changed

+7
-0
lines changed

1 file changed

+7
-0
lines changed

docs/source/contents/setup.rst

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -70,6 +70,13 @@ You can even configure the SAML cookie name as follows::
7070

7171
SAML_SESSION_COOKIE_NAME = 'saml_session'
7272

73+
.. Note::
74+
75+
djangosaml2 will attempt to set the ``SameSite`` attribute of the SAML session cookie to ``None`` so that it can be
76+
used in cross-site requests, but this is only possible with Django 3.1 or higher. If you are experiencing issues with
77+
unsolicited requests or cookies not being sent (particularly when using the HTTP-POST binding), consider upgrading
78+
to Django 3.1 or higher.
79+
7380
Authentication backend
7481
======================
7582

0 commit comments

Comments
 (0)