[KNOX-2567] KNOX 1.5.0 cookie samesite param error

• Type: Bug
• Status: Open
• Priority: Critical
• Resolution: Unresolved
• Affects Version/s: 1.5.0
• Component/s: KnoxSSO
• Assignee: Unassigned
• Reporter: cdmikechen
• Created: 01/Apr/21 02:23
• Updated: 01/Apr/21 02:25

Description

In new chrome samesite update ( https://www.chromium.org/updates/same-site), if we set knoxsso.cookie.secure.only false and ssl.enabled false , we must replace SameSite from None to Lax or remove it. Otherwise, knox can not set hadoop-jwt cookie and knox will jump indefinitely on home page and SSO page.