upgrade

plugin/lti_provider/db/lti13_cookie.php

@@ -0,0 +1,45 @@
+<?php
+/* For license terms, see /license.txt */
+
+use Packback\Lti1p3\Interfaces\Cookie as Lti1p3Cookie;
+
+class Lti13Cookie implements Lti1p3Cookie
+{
+    public function getCookie($name)
+    {
+        if (isset($_REQUEST['state']) && $name === 'lti1p3_'.$_REQUEST['state']) {
+            return $_REQUEST['state'];
+        }
+
+        if (isset($_COOKIE[$name])) {
+            return $_COOKIE[$name];
+        }
+        // Look for backup cookie if same site is not supported by the user's browser.
+        if (isset($_COOKIE["LEGACY_".$name])) {
+            return $_COOKIE["LEGACY_".$name];
+        }
+
+        return false;
+    }
+
+    public function setCookie($name, $value, $exp = 3600, $options = []): self
+    {
+        $cookieOptions = [
+            'expires' => time() + $exp,
+        ];
+
+        // SameSite none and secure will be required for tools to work inside iframes
+        $sameSiteOptions = [
+            'samesite' => 'None',
+            'secure' => false,
+            'httponly' => true,
+        ];
+
+        setcookie($name, $value, array_merge($cookieOptions, $sameSiteOptions, $options));
+
+        // Set a second fallback cookie in the event that "SameSite" is not supported
+        setcookie("LEGACY_".$name, $value, array_merge($cookieOptions, $options));
+
+        return $this;
+    }
+}