[Feature]: Support document.cookie
Is there an existing issue for this?
- [X] I have searched the existing issues
Summary
It should be possible in Appsmith to access document.cookie variable.
Why should this be worked on?
Query from a Discord user:
We have a single sign on solution that sets a session-cookie (HttpOnly) on our domain. Using this cookie, it's possible to fetch an access token directly from client side JS. However, since all API requests are performed by the AppSmith backend and not by the client, I've been unable to find a way to execute an API requests that includes the session-cookie.
Related issue #12858
Another user request: https://app.intercom.com/a/apps/y10e7138/inbox/inbox/conversation/164629100058404#part_id=comment-164629100058404-13282910472
@trishaanand this should be supported via our SSO and JWT feature right?
Just read the intercom conversation and this is indeed possible via our SSO feature
@Nikhil-Nandagopal This is only possible in our SSO if it supports OIDC. Unfortunately, the user's SSO doesn't support OIDC
cc: @trishaanand
+1 on this request
+1 on this request
+1 on this request
+1 on this request, needed for secured oauth flow
+1 on this request
@nirkons @Erhao would like to know your use case for supporting this feature
@nirkons @Erhao would like to know your use case for supporting this feature
Hi, Same use case as the thread starter, Currently there's no way to securely store any information on client side, leading to a much less secure environment. But in general storing in cookie is pretty useful, off the top of my head it can be used to display data from authenticated iframes for example
+1 on this request.
+1 on this request.
+1 on this request.
+1 on this request
+1 on this request!
+1 on this request!
+1 on this request!
We need to pass variables across different appsmith apps (especially user-related data).
@acreacico you can pass data across apps via the query parameters when you navigate to the next application.
Ran into this also, not sure why accessing client browser side stuff is so limited. This might be a deal breaker for me.