Support partitioned cookies (#15063)

* Allow creation of partitioned cookies

* Add changeset

* Update changelog to minor

* Update changeset with detailed description and example

---------

Co-authored-by: Erika <3019731+Princesseuh@users.noreply.github.com>

Author: jmortlock

.changeset/nine-olives-drop.md

@@ -0,0 +1,18 @@
+---
+'astro': minor
+---
+
+Adds a new `partitioned` option when setting a cookie to allow creating partitioned cookies.
+
+[Partitioned cookies](https://developer.mozilla.org/en-US/docs/Web/Privacy/Guides/Privacy_sandbox/Partitioned_cookies) can only be read within the context of the top-level site on which they were set. This allows cross-site tracking to be blocked, while still enabling legitimate uses of third-party cookies.
+
+You can create a partitioned cookie by passing `partitioned: true` when setting a cookie. Note that partitioned cookies must also be set with `secure: true`:
+
+```js
+Astro.cookies.set('my-cookie', 'value', {
+  partitioned: true,
+  secure: true,
+});
+```
+
+For more information, see the [`AstroCookieSetOptions` API reference](https://docs.astro.build/en/reference/api-reference/#astrocookiesetoptions).

packages/astro/src/core/config/schemas/base.ts

@@ -463,6 +463,7 @@ export const AstroConfigSchema = z.object({
 					maxAge: z.number().optional(),
 					sameSite: z.union([z.enum(['strict', 'lax', 'none']), z.boolean()]).optional(),
 					secure: z.boolean().optional(),
+					partitioned: z.boolean().optional(),
 				})
 				.or(z.string())
 				.transform((val) => {

packages/astro/src/core/cookies/cookies.ts

@@ -4,7 +4,7 @@ import { AstroError, AstroErrorData } from '../errors/index.js';
 
 export type AstroCookieSetOptions = Pick<
 	SerializeOptions,
-	'domain' | 'path' | 'expires' | 'maxAge' | 'httpOnly' | 'sameSite' | 'secure' | 'encode'
+	'domain' | 'path' | 'expires' | 'maxAge' | 'httpOnly' | 'sameSite' | 'secure' | 'encode' | 'partitioned'
 >;
 
 export interface AstroCookieGetOptions {

packages/integrations/netlify/test/functions/cookies.test.js

@@ -27,6 +27,18 @@ describe(
 			assert.deepEqual(resp.headers.getSetCookie(), ['foo=foo; HttpOnly', 'bar=bar; HttpOnly']);
 		});
 
+		it('Can set partitioned cookie', async () => {
+			const entryURL = new URL(
+				'./fixtures/cookies/.netlify/v1/functions/ssr/ssr.mjs',
+				import.meta.url,
+			);
+			const { default: handler } = await import(entryURL);
+			const resp = await handler(new Request('http://example.com/partitioned'), {});
+			assert.equal(resp.status, 200);
+			const cookie = resp.headers.getSetCookie()[0];
+			assert.ok(cookie.includes('Partitioned'), 'Cookie should include Partitioned attribute');
+		});
+
 		it('renders dynamic 404 page', async () => {
 			const entryURL = new URL(
 				'./fixtures/cookies/.netlify/v1/functions/ssr/ssr.mjs',

packages/integrations/netlify/test/functions/fixtures/cookies/src/pages/partitioned.js

@@ -0,0 +1,5 @@
+
+export function GET({ cookies }) {
+	cookies.set('partitioned-cookie', 'value', { partitioned: true, secure: true });
+	return new Response('ok');
+}