Add support for partitioned cookies

[rawleyfowler]

Summary

Firefox is soon going to ignore third-party aka "foreign" aka SameSite: None

Motivation

These changes allow Mojolicious to handle the new "Partitioned" attribute, as well as adding the ability to set Partitioned on Mojolicious::Sessions cookies.

References

https://www.ietf.org/archive/id/draft-cutler-httpbis-partitioned-cookies-00.html

https://github.com/privacycg/CHIPS

fixes #2179

[kraih]

Looks like some values are not ordered alphabetically and documentation is missing.

Pull request has been modified.

[rawleyfowler]

We could also mark this as experimental, though it is implemented in most browsers.

[mergify]

This pull request is now in conflicts. Could you fix it @rawleyfowler? 🙏

[mergify]

This pull request is now in conflicts. Could you fix it @rawleyfowler? 🙏

[rawleyfowler]

Plack recently merged this into Plack::Middleware::Session: plack/Plack-Middleware-Session#51 , hoping we can get this in soonish as I need it for work at some point...

[kraih]

Yes, since this is only a draft spec we have to mark it experimental.

Typos missed

[rawleyfowler]

@kraih Thanks for the review, they've been fixed.

[Copilot]

Pull Request Overview

Adds support for the new Partitioned cookie attribute to both core cookie handling and session cookies, and updates tests to cover the new behavior.

• Extend Mojo::Cookie::Response parsing, serialization, and docs with partitioned
• Add partitioned flag to Mojolicious::Sessions and include it in Set-Cookie options
• Update tests in t/mojo/cookie.t to cover Partitioned output and parsing

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
t/mojo/cookie.t	Added calls to partitioned(1) and new subtest for parsing
lib/Mojolicious/Sessions.pm	Introduced partitioned attribute in constructor, store logic, and docs
lib/Mojo/Cookie/Response.pm	Added partitioned to has, parsing map, to_string, and docs

Comments suppressed due to low confidence (1)

lib/Mojolicious/Sessions.pm:58

• Consider adding tests to verify that the partitioned flag on session cookies results in the Partitioned attribute being set in the Set-Cookie header.

    partitioned => $self->partitioned,

[Copilot]

Typo: 'ammendment' should be 'amendment' for accuracy in the documentation.

Suggested change

	Partitioned flag, this is to be used in accordance to the CHIPS ammendment to RFC 6265.
	Partitioned flag, this is to be used in accordance to the CHIPS amendment to RFC 6265.