Add support for partitioned cookies

[rawleyfowler]

Summary

Firefox is soon going to ignore third-party aka "foreign" aka SameSite: None

Motivation

These changes allow Mojolicious to handle the new "Partitioned" attribute, as well as adding the ability to set Partitioned on Mojolicious::Sessions cookies.

References

https://www.ietf.org/archive/id/draft-cutler-httpbis-partitioned-cookies-00.html

https://github.com/privacycg/CHIPS

fixes #2179

[kraih]

Looks like some values are not ordered alphabetically and documentation is missing.

Pull request has been modified.

[rawleyfowler]

We could also mark this as experimental, though it is implemented in most browsers.

[mergify]

This pull request is now in conflicts. Could you fix it @rawleyfowler? 🙏

[mergify]

This pull request is now in conflicts. Could you fix it @rawleyfowler? 🙏

[rawleyfowler]

Plack recently merged this into Plack::Middleware::Session: plack/Plack-Middleware-Session#51 , hoping we can get this in soonish as I need it for work at some point...

[kraih]

Yes, since this is only a draft spec we have to mark it experimental.

Typos missed

[rawleyfowler]

@kraih Thanks for the review, they've been fixed.

[Copilot]

Pull Request Overview

Adds support for the new Partitioned cookie attribute to both core cookie handling and session cookies, and updates tests to cover the new behavior.

• Extend Mojo::Cookie::Response parsing, serialization, and docs with partitioned
• Add partitioned flag to Mojolicious::Sessions and include it in Set-Cookie options
• Update tests in t/mojo/cookie.t to cover Partitioned output and parsing

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
t/mojo/cookie.t	Added calls to partitioned(1) and new subtest for parsing
lib/Mojolicious/Sessions.pm	Introduced partitioned attribute in constructor, store logic, and docs
lib/Mojo/Cookie/Response.pm	Added partitioned to has, parsing map, to_string, and docs

Comments suppressed due to low confidence (1)

lib/Mojolicious/Sessions.pm:58

• Consider adding tests to verify that the partitioned flag on session cookies results in the Partitioned attribute being set in the Set-Cookie header.

    partitioned => $self->partitioned,

[kraih]

Please fix the typos before merge.

[rawleyfowler]

@kraih Should be good to go, thanks :)