session.test.cookie.support portal property

Issue

Can we disable session.test.cookie.support in the portal-ext.properties file as it enables the user authentication process when an iframe is used?

This property is related to the cookie COOKIE_SUPPORT (How Cookies are Used in Liferay). Setting it to false will bypass checking whether or not the cookie is within the request.
The session.test.cookie.support property in Liferay DXP serves the purpose of user authentication and session management.
Liferay relies on cookies to maintain user sessions and store essential information. This property acts as a check to verify if the user's browser has cookies enabled.
- By default, session.test.cookie.support is set to true. This means Liferay sends a test cookie named "COOKIE_SUPPORT" to the browser before allowing login.
- If the browser accepts and sends the cookie back, Liferay knows cookies are functional and can proceed with authentication.
However, this is not recommended as it disables the check altogether. Users with disabled cookies won't be notified, potentially leading to login frustration.
Disabling the check should only be considered as a last resort if it is ensured that the cookies are always enabled for the users.

An iframe stands for inline frame, is essentially a window within a web page that displays content from another source. It's like having a mini-browser inside the main browser window.
- e.x; If users want to include a YouTube video, a social media feed, or even a live chat on their website, iframes provide a way to seamlessly integrate that external content.