AEM Dispatcher renderid cookie

[MR_Nurfajri]

Hello, I would like to ask how to add Secure and SameSite=Strict flag to the renderid cookie on dispatcher, i know on the link here it is stated that you can add a secure config, but it's not shown how to achieve it

https://experienceleague.adobe.com/en/docs/experience-manager-dispatcher/using/configuring/dispatche...

[MukeshYadav_ · Accepted solution]

Hi @MR_Nurfajri ,

You may refer https://eliarms.medium.com/how-to-implement-httponly-and-secure-cookie-in-web-servers-ebad20427b94

https://owasp.org/www-community/HttpOnly

Thanks

[MR_Nurfajri]

Hi @MukeshYadav_ I've tried read the blog on the link attached. Thank you for that, it worked for the secure flag but not for the SameSite=Strict. 
so I've set these properties to the renderid cookie

Header edit Set-Cookie "^renderid=" "$0; Secure; SameSite=Strict"

but when i checked only the secure flag has been set, the SameSite=Strict is not being set to the renderid cookie

[Tethich]

Hi @MR_Nurfajri 

Try to go to your AEM web console and check property "Enable Proxy/Load Balancer Connection" of the "Apache Felix Jetty Based Http Service"

[kautuk_sahni]

@MR_Nurfajri Did you find the suggestions helpful? Please let us know if you require more information. Otherwise, please mark the answer as correct for posterity. If you've discovered a solution yourself, we would appreciate it if you could share it with the community. Thank you!