I'm trying to implement the SAML SP-initiated flow. The docs say that I should set a cookie with a nonce value before redirecting to the bookmark url. How do I do that? Specifically, I tried making an html file that sets the cookie value and redirects - however, when I go back to the page, the cookie is not updated. I think the reason is that the cookie is updating in a different domain compared to the landing page. Here's my template html for reference:
<!DOCTYPE html>
<html lang="en">
<form id="RedirectForm"
method="get"
action="{{redirect_uri}}">
</form>
<script>
window.onload = function () {
document.cookie = "{{cookie_key}}={{cookie_value}}";
document.querySelector("#RedirectForm").submit();
}
</script>
</html>
Cookies set in this manor are specific to not only the domain but the full path of the URL. Since the SSO response runs on a url like https://stack.q2developer.com/sdk/partner/mobilews/sso/vendor/3 ... the cookie will only be available at that full URL.
Instead, the "path" parameter should be added to the cookie string to set it at the root level for that domain:
document.cookie = "{}={}; path=/";
