News for hackers. Stuff that matters.

A comment on Third Party Cookies Must Be Removed. Parent comment

Re:Third Party Cookies Must Be Removed by cuu508 on Friday May 02, 2025 @01:18AM (#43866433)
Use OAuth2 to get system B's access token, then use authenticated server-to-server API requests to pull needed information from system B.
[ Parent | on HN ]
Re:Third Party Cookies Must Be Removed by namdnay on Friday May 02, 2025 @09:05AM (#43869220)
This multiplies the cost of the integration by at least an order of magnitude
[ Parent | on HN ]
Re:Third Party Cookies Must Be Removed by svieira on Friday May 02, 2025 @10:35AM (#43870368)
BINGO! The issue here of course is that now instead of _two_ components (Front End A and Embed B) you now have four (the back ends must communicate and if A didn't need a back end ... well, now it does).

Now, if you meant "Use OAuth2 in the browser", that's just the original case (you can't authorize if you can't authenticate and it's the ambient authentication that's being stripped when you eliminate third party cookies).

[ Parent | on HN ]