feat: add cookie options by riqwan · Pull Request #12720 · medusajs/medusa

riqwan · 2025-06-12T13:27:30Z

What
Allow to configure hrm through env variable
Allow to pass cookie options through medusa config

vercel · 2025-06-12T13:27:35Z

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
api-reference	🔄 Building (Inspect)	Visit Preview	💬 Add feedback	Jun 25, 2025 8:55am
medusa-dashboard	🛑 Canceled (Inspect)			Jun 25, 2025 8:55am

7 Skipped Deployments

Name	Status	Preview	Updated (UTC)
api-reference-v2	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am
cloud-docs	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am
docs-ui	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am
docs-v2	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am
medusa-docs	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am
resources-docs	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am
user-guide	⬜️ Ignored (Inspect)	Visit Preview	Jun 25, 2025 8:55am

changeset-bot · 2025-06-12T13:27:36Z

🦋 Changeset detected

Latest commit: 38ad12d

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 69 packages

Name	Type
@medusajs/framework	Patch
@medusajs/types	Patch
@medusajs/medusa	Patch
@medusajs/test-utils	Patch
@medusajs/analytics	Patch
@medusajs/api-key	Patch
@medusajs/auth	Patch
@medusajs/cache-inmemory	Patch
@medusajs/cache-redis	Patch
@medusajs/cart	Patch
@medusajs/currency	Patch
@medusajs/customer	Patch
@medusajs/event-bus-local	Patch
@medusajs/event-bus-redis	Patch
@medusajs/file	Patch
@medusajs/fulfillment	Patch
@medusajs/index	Patch
@medusajs/inventory	Patch
@medusajs/link-modules	Patch
@medusajs/locking	Patch
@medusajs/notification	Patch
@medusajs/order	Patch
@medusajs/payment	Patch
@medusajs/pricing	Patch
@medusajs/product	Patch
@medusajs/promotion	Patch
@medusajs/region	Patch
@medusajs/sales-channel	Patch
@medusajs/stock-location	Patch
@medusajs/store	Patch
@medusajs/tax	Patch
@medusajs/user	Patch
@medusajs/workflow-engine-inmemory	Patch
@medusajs/workflow-engine-redis	Patch
@medusajs/analytics-local	Patch
@medusajs/analytics-posthog	Patch
@medusajs/auth-emailpass	Patch
@medusajs/auth-github	Patch
@medusajs/auth-google	Patch
@medusajs/file-local	Patch
@medusajs/file-s3	Patch
@medusajs/fulfillment-manual	Patch
@medusajs/locking-postgres	Patch
@medusajs/locking-redis	Patch
@medusajs/notification-local	Patch
@medusajs/notification-sendgrid	Patch
@medusajs/payment-stripe	Patch
@medusajs/core-flows	Patch
@medusajs/js-sdk	Patch
@medusajs/modules-sdk	Patch
@medusajs/orchestration	Patch
@medusajs/utils	Patch
@medusajs/workflows-sdk	Patch
@medusajs/medusa-oas-cli	Patch
@medusajs/admin-bundler	Patch
@medusajs/dashboard	Patch
integration-tests-http	Patch
@medusajs/cli	Patch
@medusajs/oas-github-ci	Patch
@medusajs/telemetry	Patch
@medusajs/admin-sdk	Patch
@medusajs/admin-shared	Patch
@medusajs/admin-vite-plugin	Patch
@medusajs/icons	Patch
@medusajs/toolbox	Patch
@medusajs/ui-preset	Patch
create-medusa-app	Patch
medusa-dev-cli	Patch
@medusajs/ui	Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

riqwan · 2025-06-12T13:27:59Z

/snapshot-this

riqwan · 2025-06-12T14:21:04Z

/snapshot-this

riqwan · 2025-06-12T14:25:18Z

/snapshot-this

github-actions · 2025-06-12T14:39:09Z

🚀 A snapshot release has been made for this PR

Test the snapshots by updating your package.json with the newly published versions:

yarn add @medusajs/admin-bundler@2.8.5-snapshot-20250612143702

yarn add @medusajs/admin-sdk@2.8.5-snapshot-20250612143702

yarn add @medusajs/admin-shared@2.8.5-snapshot-20250612143702

yarn add @medusajs/admin-vite-plugin@2.8.5-snapshot-20250612143702

yarn add @medusajs/dashboard@2.8.5-snapshot-20250612143702

yarn add create-medusa-app@2.8.5-snapshot-20250612143702

yarn add @medusajs/cli@2.8.5-snapshot-20250612143702

yarn add medusa-dev-cli@2.8.5-snapshot-20250612143702

yarn add @medusajs/medusa-oas-cli@2.8.5-snapshot-20250612143702

yarn add @medusajs/core-flows@2.8.5-snapshot-20250612143702

yarn add @medusajs/framework@2.8.5-snapshot-20250612143702

yarn add @medusajs/js-sdk@2.8.5-snapshot-20250612143702

yarn add @medusajs/modules-sdk@2.8.5-snapshot-20250612143702

yarn add @medusajs/orchestration@2.8.5-snapshot-20250612143702

yarn add @medusajs/types@2.8.5-snapshot-20250612143702

yarn add @medusajs/utils@2.8.5-snapshot-20250612143702

yarn add @medusajs/workflows-sdk@2.8.5-snapshot-20250612143702

yarn add @medusajs/icons@2.8.5-snapshot-20250612143702

yarn add @medusajs/ui@4.0.15-snapshot-20250612143702

yarn add @medusajs/ui-preset@2.8.5-snapshot-20250612143702

yarn add @medusajs/medusa@2.8.5-snapshot-20250612143702

yarn add @medusajs/telemetry@2.8.5-snapshot-20250612143702

yarn add @medusajs/test-utils@2.8.5-snapshot-20250612143702

yarn add @medusajs/analytics@2.8.5-snapshot-20250612143702

yarn add @medusajs/api-key@2.8.5-snapshot-20250612143702

yarn add @medusajs/auth@2.8.5-snapshot-20250612143702

yarn add @medusajs/cache-inmemory@2.8.5-snapshot-20250612143702

yarn add @medusajs/cache-redis@2.8.5-snapshot-20250612143702

yarn add @medusajs/cart@2.8.5-snapshot-20250612143702

yarn add @medusajs/currency@2.8.5-snapshot-20250612143702

yarn add @medusajs/customer@2.8.5-snapshot-20250612143702

yarn add @medusajs/event-bus-local@2.8.5-snapshot-20250612143702

yarn add @medusajs/event-bus-redis@2.8.5-snapshot-20250612143702

yarn add @medusajs/file@2.8.5-snapshot-20250612143702

yarn add @medusajs/fulfillment@2.8.5-snapshot-20250612143702

yarn add @medusajs/index@2.8.5-snapshot-20250612143702

yarn add @medusajs/inventory@2.8.5-snapshot-20250612143702

yarn add @medusajs/link-modules@2.8.5-snapshot-20250612143702

yarn add @medusajs/locking@2.8.5-snapshot-20250612143702

yarn add @medusajs/notification@2.8.5-snapshot-20250612143702

yarn add @medusajs/order@2.8.5-snapshot-20250612143702

yarn add @medusajs/payment@2.8.5-snapshot-20250612143702

yarn add @medusajs/pricing@2.8.5-snapshot-20250612143702

yarn add @medusajs/product@2.8.5-snapshot-20250612143702

yarn add @medusajs/promotion@2.8.5-snapshot-20250612143702

yarn add @medusajs/analytics-local@2.8.5-snapshot-20250612143702

yarn add @medusajs/analytics-posthog@2.8.5-snapshot-20250612143702

yarn add @medusajs/auth-emailpass@2.8.5-snapshot-20250612143702

yarn add @medusajs/auth-github@2.8.5-snapshot-20250612143702

yarn add @medusajs/auth-google@2.8.5-snapshot-20250612143702

yarn add @medusajs/file-local@2.8.5-snapshot-20250612143702

yarn add @medusajs/file-s3@2.8.5-snapshot-20250612143702

yarn add @medusajs/fulfillment-manual@2.8.5-snapshot-20250612143702

yarn add @medusajs/locking-postgres@2.8.5-snapshot-20250612143702

yarn add @medusajs/locking-redis@2.8.5-snapshot-20250612143702

yarn add @medusajs/notification-local@2.8.5-snapshot-20250612143702

yarn add @medusajs/notification-sendgrid@2.8.5-snapshot-20250612143702

yarn add @medusajs/payment-stripe@2.8.5-snapshot-20250612143702

yarn add @medusajs/region@2.8.5-snapshot-20250612143702

yarn add @medusajs/sales-channel@2.8.5-snapshot-20250612143702

yarn add @medusajs/stock-location@2.8.5-snapshot-20250612143702

yarn add @medusajs/store@2.8.5-snapshot-20250612143702

yarn add @medusajs/tax@2.8.5-snapshot-20250612143702

yarn add @medusajs/user@2.8.5-snapshot-20250612143702

yarn add @medusajs/workflow-engine-inmemory@2.8.5-snapshot-20250612143702

yarn add @medusajs/workflow-engine-redis@2.8.5-snapshot-20250612143702

Latest commit: d4b0932

thetutlage · 2025-06-18T07:05:53Z

/snapshot-this

github-actions · 2025-06-18T07:13:32Z

🚀 A snapshot release has been made for this PR

Test the snapshots by updating your package.json with the newly published versions:

yarn add @medusajs/admin-bundler@2.8.5-snapshot-20250618071124

yarn add @medusajs/admin-sdk@2.8.5-snapshot-20250618071124

yarn add @medusajs/admin-shared@2.8.5-snapshot-20250618071124

yarn add @medusajs/admin-vite-plugin@2.8.5-snapshot-20250618071124

yarn add @medusajs/dashboard@2.8.5-snapshot-20250618071124

yarn add create-medusa-app@2.8.5-snapshot-20250618071124

yarn add @medusajs/cli@2.8.5-snapshot-20250618071124

yarn add medusa-dev-cli@2.8.5-snapshot-20250618071124

yarn add @medusajs/medusa-oas-cli@2.8.5-snapshot-20250618071124

yarn add @medusajs/core-flows@2.8.5-snapshot-20250618071124

yarn add @medusajs/framework@2.8.5-snapshot-20250618071124

yarn add @medusajs/js-sdk@2.8.5-snapshot-20250618071124

yarn add @medusajs/modules-sdk@2.8.5-snapshot-20250618071124

yarn add @medusajs/orchestration@2.8.5-snapshot-20250618071124

yarn add @medusajs/types@2.8.5-snapshot-20250618071124

yarn add @medusajs/utils@2.8.5-snapshot-20250618071124

yarn add @medusajs/workflows-sdk@2.8.5-snapshot-20250618071124

yarn add @medusajs/icons@2.8.5-snapshot-20250618071124

yarn add @medusajs/ui@4.0.15-snapshot-20250618071124

yarn add @medusajs/ui-preset@2.8.5-snapshot-20250618071124

yarn add @medusajs/medusa@2.8.5-snapshot-20250618071124

yarn add @medusajs/telemetry@2.8.5-snapshot-20250618071124

yarn add @medusajs/test-utils@2.8.5-snapshot-20250618071124

yarn add @medusajs/analytics@2.8.5-snapshot-20250618071124

yarn add @medusajs/api-key@2.8.5-snapshot-20250618071124

yarn add @medusajs/auth@2.8.5-snapshot-20250618071124

yarn add @medusajs/cache-inmemory@2.8.5-snapshot-20250618071124

yarn add @medusajs/cache-redis@2.8.5-snapshot-20250618071124

yarn add @medusajs/cart@2.8.5-snapshot-20250618071124

yarn add @medusajs/currency@2.8.5-snapshot-20250618071124

yarn add @medusajs/customer@2.8.5-snapshot-20250618071124

yarn add @medusajs/event-bus-local@2.8.5-snapshot-20250618071124

yarn add @medusajs/event-bus-redis@2.8.5-snapshot-20250618071124

yarn add @medusajs/file@2.8.5-snapshot-20250618071124

yarn add @medusajs/fulfillment@2.8.5-snapshot-20250618071124

yarn add @medusajs/index@2.8.5-snapshot-20250618071124

yarn add @medusajs/inventory@2.8.5-snapshot-20250618071124

yarn add @medusajs/link-modules@2.8.5-snapshot-20250618071124

yarn add @medusajs/locking@2.8.5-snapshot-20250618071124

yarn add @medusajs/notification@2.8.5-snapshot-20250618071124

yarn add @medusajs/order@2.8.5-snapshot-20250618071124

yarn add @medusajs/payment@2.8.5-snapshot-20250618071124

yarn add @medusajs/pricing@2.8.5-snapshot-20250618071124

yarn add @medusajs/product@2.8.5-snapshot-20250618071124

yarn add @medusajs/promotion@2.8.5-snapshot-20250618071124

yarn add @medusajs/analytics-local@2.8.5-snapshot-20250618071124

yarn add @medusajs/analytics-posthog@2.8.5-snapshot-20250618071124

yarn add @medusajs/auth-emailpass@2.8.5-snapshot-20250618071124

yarn add @medusajs/auth-github@2.8.5-snapshot-20250618071124

yarn add @medusajs/auth-google@2.8.5-snapshot-20250618071124

yarn add @medusajs/file-local@2.8.5-snapshot-20250618071124

yarn add @medusajs/file-s3@2.8.5-snapshot-20250618071124

yarn add @medusajs/fulfillment-manual@2.8.5-snapshot-20250618071124

yarn add @medusajs/locking-postgres@2.8.5-snapshot-20250618071124

yarn add @medusajs/locking-redis@2.8.5-snapshot-20250618071124

yarn add @medusajs/notification-local@2.8.5-snapshot-20250618071124

yarn add @medusajs/notification-sendgrid@2.8.5-snapshot-20250618071124

yarn add @medusajs/payment-stripe@2.8.5-snapshot-20250618071124

yarn add @medusajs/region@2.8.5-snapshot-20250618071124

yarn add @medusajs/sales-channel@2.8.5-snapshot-20250618071124

yarn add @medusajs/stock-location@2.8.5-snapshot-20250618071124

yarn add @medusajs/store@2.8.5-snapshot-20250618071124

yarn add @medusajs/tax@2.8.5-snapshot-20250618071124

yarn add @medusajs/user@2.8.5-snapshot-20250618071124

yarn add @medusajs/workflow-engine-inmemory@2.8.5-snapshot-20250618071124

yarn add @medusajs/workflow-engine-redis@2.8.5-snapshot-20250618071124

Latest commit: 9bdd542

sgirones · 2025-06-20T05:57:16Z

/snapshot-this

github-actions · 2025-06-20T06:04:44Z

🚀 A snapshot release has been made for this PR

Test the snapshots by updating your package.json with the newly published versions:

yarn add @medusajs/admin-bundler@2.8.5-snapshot-20250620060242

yarn add @medusajs/admin-sdk@2.8.5-snapshot-20250620060242

yarn add @medusajs/admin-shared@2.8.5-snapshot-20250620060242

yarn add @medusajs/admin-vite-plugin@2.8.5-snapshot-20250620060242

yarn add @medusajs/dashboard@2.8.5-snapshot-20250620060242

yarn add create-medusa-app@2.8.5-snapshot-20250620060242

yarn add @medusajs/cli@2.8.5-snapshot-20250620060242

yarn add medusa-dev-cli@2.8.5-snapshot-20250620060242

yarn add @medusajs/medusa-oas-cli@2.8.5-snapshot-20250620060242

yarn add @medusajs/core-flows@2.8.5-snapshot-20250620060242

yarn add @medusajs/framework@2.8.5-snapshot-20250620060242

yarn add @medusajs/js-sdk@2.8.5-snapshot-20250620060242

yarn add @medusajs/modules-sdk@2.8.5-snapshot-20250620060242

yarn add @medusajs/orchestration@2.8.5-snapshot-20250620060242

yarn add @medusajs/types@2.8.5-snapshot-20250620060242

yarn add @medusajs/utils@2.8.5-snapshot-20250620060242

yarn add @medusajs/workflows-sdk@2.8.5-snapshot-20250620060242

yarn add @medusajs/icons@2.8.5-snapshot-20250620060242

yarn add @medusajs/ui@4.0.15-snapshot-20250620060242

yarn add @medusajs/ui-preset@2.8.5-snapshot-20250620060242

yarn add @medusajs/medusa@2.8.5-snapshot-20250620060242

yarn add @medusajs/telemetry@2.8.5-snapshot-20250620060242

yarn add @medusajs/test-utils@2.8.5-snapshot-20250620060242

yarn add @medusajs/analytics@2.8.5-snapshot-20250620060242

yarn add @medusajs/api-key@2.8.5-snapshot-20250620060242

yarn add @medusajs/auth@2.8.5-snapshot-20250620060242

yarn add @medusajs/cache-inmemory@2.8.5-snapshot-20250620060242

yarn add @medusajs/cache-redis@2.8.5-snapshot-20250620060242

yarn add @medusajs/cart@2.8.5-snapshot-20250620060242

yarn add @medusajs/currency@2.8.5-snapshot-20250620060242

yarn add @medusajs/customer@2.8.5-snapshot-20250620060242

yarn add @medusajs/event-bus-local@2.8.5-snapshot-20250620060242

yarn add @medusajs/event-bus-redis@2.8.5-snapshot-20250620060242

yarn add @medusajs/file@2.8.5-snapshot-20250620060242

yarn add @medusajs/fulfillment@2.8.5-snapshot-20250620060242

yarn add @medusajs/index@2.8.5-snapshot-20250620060242

yarn add @medusajs/inventory@2.8.5-snapshot-20250620060242

yarn add @medusajs/link-modules@2.8.5-snapshot-20250620060242

yarn add @medusajs/locking@2.8.5-snapshot-20250620060242

yarn add @medusajs/notification@2.8.5-snapshot-20250620060242

yarn add @medusajs/order@2.8.5-snapshot-20250620060242

yarn add @medusajs/payment@2.8.5-snapshot-20250620060242

yarn add @medusajs/pricing@2.8.5-snapshot-20250620060242

yarn add @medusajs/product@2.8.5-snapshot-20250620060242

yarn add @medusajs/promotion@2.8.5-snapshot-20250620060242

yarn add @medusajs/analytics-local@2.8.5-snapshot-20250620060242

yarn add @medusajs/analytics-posthog@2.8.5-snapshot-20250620060242

yarn add @medusajs/auth-emailpass@2.8.5-snapshot-20250620060242

yarn add @medusajs/auth-github@2.8.5-snapshot-20250620060242

yarn add @medusajs/auth-google@2.8.5-snapshot-20250620060242

yarn add @medusajs/file-local@2.8.5-snapshot-20250620060242

yarn add @medusajs/file-s3@2.8.5-snapshot-20250620060242

yarn add @medusajs/fulfillment-manual@2.8.5-snapshot-20250620060242

yarn add @medusajs/locking-postgres@2.8.5-snapshot-20250620060242

yarn add @medusajs/locking-redis@2.8.5-snapshot-20250620060242

yarn add @medusajs/notification-local@2.8.5-snapshot-20250620060242

yarn add @medusajs/notification-sendgrid@2.8.5-snapshot-20250620060242

yarn add @medusajs/payment-stripe@2.8.5-snapshot-20250620060242

yarn add @medusajs/region@2.8.5-snapshot-20250620060242

yarn add @medusajs/sales-channel@2.8.5-snapshot-20250620060242

yarn add @medusajs/stock-location@2.8.5-snapshot-20250620060242

yarn add @medusajs/store@2.8.5-snapshot-20250620060242

yarn add @medusajs/tax@2.8.5-snapshot-20250620060242

yarn add @medusajs/user@2.8.5-snapshot-20250620060242

yarn add @medusajs/workflow-engine-inmemory@2.8.5-snapshot-20250620060242

yarn add @medusajs/workflow-engine-redis@2.8.5-snapshot-20250620060242

Latest commit: 1c98754

sgirones · 2025-06-20T06:37:31Z

/snapshot-this

sgirones · 2025-06-20T06:40:33Z

/snapshot-this

github-actions · 2025-06-20T06:48:27Z

🚀 A snapshot release has been made for this PR

Test the snapshots by updating your package.json with the newly published versions:

yarn add @medusajs/admin-bundler@2.8.5-snapshot-20250620064605

yarn add @medusajs/admin-sdk@2.8.5-snapshot-20250620064605

yarn add @medusajs/admin-shared@2.8.5-snapshot-20250620064605

yarn add @medusajs/admin-vite-plugin@2.8.5-snapshot-20250620064605

yarn add @medusajs/dashboard@2.8.5-snapshot-20250620064605

yarn add create-medusa-app@2.8.5-snapshot-20250620064605

yarn add @medusajs/cli@2.8.5-snapshot-20250620064605

yarn add medusa-dev-cli@2.8.5-snapshot-20250620064605

yarn add @medusajs/medusa-oas-cli@2.8.5-snapshot-20250620064605

yarn add @medusajs/core-flows@2.8.5-snapshot-20250620064605

yarn add @medusajs/framework@2.8.5-snapshot-20250620064605

yarn add @medusajs/js-sdk@2.8.5-snapshot-20250620064605

yarn add @medusajs/modules-sdk@2.8.5-snapshot-20250620064605

yarn add @medusajs/orchestration@2.8.5-snapshot-20250620064605

yarn add @medusajs/types@2.8.5-snapshot-20250620064605

yarn add @medusajs/utils@2.8.5-snapshot-20250620064605

yarn add @medusajs/workflows-sdk@2.8.5-snapshot-20250620064605

yarn add @medusajs/icons@2.8.5-snapshot-20250620064605

yarn add @medusajs/ui@4.0.15-snapshot-20250620064605

yarn add @medusajs/ui-preset@2.8.5-snapshot-20250620064605

yarn add @medusajs/medusa@2.8.5-snapshot-20250620064605

yarn add @medusajs/telemetry@2.8.5-snapshot-20250620064605

yarn add @medusajs/test-utils@2.8.5-snapshot-20250620064605

yarn add @medusajs/analytics@2.8.5-snapshot-20250620064605

yarn add @medusajs/api-key@2.8.5-snapshot-20250620064605

yarn add @medusajs/auth@2.8.5-snapshot-20250620064605

yarn add @medusajs/cache-inmemory@2.8.5-snapshot-20250620064605

yarn add @medusajs/cache-redis@2.8.5-snapshot-20250620064605

yarn add @medusajs/cart@2.8.5-snapshot-20250620064605

yarn add @medusajs/currency@2.8.5-snapshot-20250620064605

yarn add @medusajs/customer@2.8.5-snapshot-20250620064605

yarn add @medusajs/event-bus-local@2.8.5-snapshot-20250620064605

yarn add @medusajs/event-bus-redis@2.8.5-snapshot-20250620064605

yarn add @medusajs/file@2.8.5-snapshot-20250620064605

yarn add @medusajs/fulfillment@2.8.5-snapshot-20250620064605

yarn add @medusajs/index@2.8.5-snapshot-20250620064605

yarn add @medusajs/inventory@2.8.5-snapshot-20250620064605

yarn add @medusajs/link-modules@2.8.5-snapshot-20250620064605

yarn add @medusajs/locking@2.8.5-snapshot-20250620064605

yarn add @medusajs/notification@2.8.5-snapshot-20250620064605

yarn add @medusajs/order@2.8.5-snapshot-20250620064605

yarn add @medusajs/payment@2.8.5-snapshot-20250620064605

yarn add @medusajs/pricing@2.8.5-snapshot-20250620064605

yarn add @medusajs/product@2.8.5-snapshot-20250620064605

yarn add @medusajs/promotion@2.8.5-snapshot-20250620064605

yarn add @medusajs/analytics-local@2.8.5-snapshot-20250620064605

yarn add @medusajs/analytics-posthog@2.8.5-snapshot-20250620064605

yarn add @medusajs/auth-emailpass@2.8.5-snapshot-20250620064605

yarn add @medusajs/auth-github@2.8.5-snapshot-20250620064605

yarn add @medusajs/auth-google@2.8.5-snapshot-20250620064605

yarn add @medusajs/file-local@2.8.5-snapshot-20250620064605

yarn add @medusajs/file-s3@2.8.5-snapshot-20250620064605

yarn add @medusajs/fulfillment-manual@2.8.5-snapshot-20250620064605

yarn add @medusajs/locking-postgres@2.8.5-snapshot-20250620064605

yarn add @medusajs/locking-redis@2.8.5-snapshot-20250620064605

yarn add @medusajs/notification-local@2.8.5-snapshot-20250620064605

yarn add @medusajs/notification-sendgrid@2.8.5-snapshot-20250620064605

yarn add @medusajs/payment-stripe@2.8.5-snapshot-20250620064605

yarn add @medusajs/region@2.8.5-snapshot-20250620064605

yarn add @medusajs/sales-channel@2.8.5-snapshot-20250620064605

yarn add @medusajs/stock-location@2.8.5-snapshot-20250620064605

yarn add @medusajs/store@2.8.5-snapshot-20250620064605

yarn add @medusajs/tax@2.8.5-snapshot-20250620064605

yarn add @medusajs/user@2.8.5-snapshot-20250620064605

yarn add @medusajs/workflow-engine-inmemory@2.8.5-snapshot-20250620064605

yarn add @medusajs/workflow-engine-redis@2.8.5-snapshot-20250620064605

Latest commit: 1c98754

adrien2p · 2025-06-25T08:54:28Z

@olivermrbl could you have a look at this one as well please? We are relying on it on our side through the snapshot for now

olivermrbl · 2025-06-25T09:11:19Z

Fine to merge if you have reviewed it 💪

atinfosec · 2025-07-04T10:57:06Z

I tried with cookie configuration

cookieOptions: {
sameSite: "none"
}

When I login on admin panel both the apis email and session are working fine but "me" (3rd api when login) api is giving unauthorized. When I removed the "cookieOptions" from "projectConfig" it is working fine.

The problem is I want to run api server on different domain and admin panel on different domain, for this I need to set Set-Cookie "SameSite=none" but I am unable to do this.

carlos-r-l-rodrigues · 2025-07-04T14:44:01Z

I tried with cookie configuration

cookieOptions: { sameSite: "none" }

When I login on admin panel both the apis email and session are working fine but "me" (3rd api when login) api is giving unauthorized. When I removed the "cookieOptions" from "projectConfig" it is working fine.

The problem is I want to run api server on different domain and admin panel on different domain, for this I need to set Set-Cookie "SameSite=none" but I am unable to do this.

Hi @atinfosec,
this is the default behavior when deployed to staging or production.

if (isProduction || isStaging) {
  secure = true
  sameSite = "none"
}

atinfosec · 2025-07-04T14:53:52Z

I tried with cookie configuration
cookieOptions: { sameSite: "none" }
When I login on admin panel both the apis email and session are working fine but "me" (3rd api when login) api is giving unauthorized. When I removed the "cookieOptions" from "projectConfig" it is working fine.
The problem is I want to run api server on different domain and admin panel on different domain, for this I need to set Set-Cookie "SameSite=none" but I am unable to do this.

Hi @atinfosec, this is the default behavior when deployed to staging or production.
if (isProduction || isStaging) {
  secure = true
  sameSite = "none"
}

Even after creating build using command npx medusa build --admin-only in production mode same issue persist. SameSite in Set-cookie is set to 'Lax' which is default.

feat: add cookie options

3a684d3

github-actions Bot added type: feature team: medusa labels Jun 12, 2025

vercel Bot deployed to Preview – medusa-dashboard June 12, 2025 13:29 View deployment

thetutlage added 2 commits June 18, 2025 12:35

feat: allow configuring hmr server port via the HMR_PORT env var

4e74131

Merge branch 'develop' into feat/cookie-options

c3fca96

thetutlage mentioned this pull request Jun 18, 2025

feat: allow configuring hmr server port via the HMR_PORT env var #12759

Closed

vercel Bot deployed to Preview – medusa-dashboard June 18, 2025 07:12 View deployment

vercel Bot deployed to Preview – medusa-dashboard June 20, 2025 05:55 View deployment

support configuring HMR host and proto

501ac62

sgirones force-pushed the feat/cookie-options branch from 782ab0f to 501ac62 Compare June 20, 2025 05:56

vercel Bot deployed to Preview – medusa-dashboard June 20, 2025 05:58 View deployment

allow configuring the hmr client_port

bcf443f

vercel Bot deployed to Preview – medusa-dashboard June 20, 2025 06:38 View deployment

adrien2p marked this pull request as ready for review June 25, 2025 08:42

adrien2p requested a review from a team as a code owner June 25, 2025 08:42

adrien2p requested a review from sradevski June 25, 2025 08:42

adrien2p requested review from carlos-r-l-rodrigues and fPolic June 25, 2025 08:42

adrien2p added 3 commits June 25, 2025 10:42

Merge branch 'develop' into feat/cookie-options

bf65073

cleanup

dbdc40c

cleanup

38ad12d

vercel Bot deployed to Preview – medusa-dashboard June 25, 2025 08:54 View deployment

carlos-r-l-rodrigues approved these changes Jun 25, 2025

View reviewed changes

adrien2p merged commit 820a936 into develop Jun 25, 2025
26 checks passed

riqwan deleted the feat/cookie-options branch June 25, 2025 09:37

Uh oh!

Uh oh!

Conversation

riqwan commented Jun 12, 2025 • edited by adrien2p Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

vercel Bot commented Jun 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

changeset-bot Bot commented Jun 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🦋 Changeset detected

Uh oh!

riqwan commented Jun 12, 2025

Uh oh!

riqwan commented Jun 12, 2025

Uh oh!

riqwan commented Jun 12, 2025

Uh oh!

github-actions Bot commented Jun 12, 2025

🚀 A snapshot release has been made for this PR

Uh oh!

thetutlage commented Jun 18, 2025

Uh oh!

github-actions Bot commented Jun 18, 2025

🚀 A snapshot release has been made for this PR

Uh oh!

sgirones commented Jun 20, 2025

Uh oh!

github-actions Bot commented Jun 20, 2025

🚀 A snapshot release has been made for this PR

Uh oh!

sgirones commented Jun 20, 2025

Uh oh!

sgirones commented Jun 20, 2025

Uh oh!

github-actions Bot commented Jun 20, 2025

🚀 A snapshot release has been made for this PR

Uh oh!

adrien2p commented Jun 25, 2025

Uh oh!

olivermrbl commented Jun 25, 2025

Uh oh!

Uh oh!

atinfosec commented Jul 4, 2025

Uh oh!

carlos-r-l-rodrigues commented Jul 4, 2025

Uh oh!

atinfosec commented Jul 4, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

riqwan commented Jun 12, 2025 •

edited by adrien2p

Loading

vercel Bot commented Jun 12, 2025 •

edited

Loading

changeset-bot Bot commented Jun 12, 2025 •

edited

Loading