From d2f6572e93446d611fc66cf68d0b71cd13366d55 Mon Sep 17 00:00:00 2001
From: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
Date: Thu, 30 Jul 2020 10:10:04 +0200
Subject: [PATCH 18/19] add note on usage of OIDC_SET_COOKIE_APPEND in the
 sample config/doc

Signed-off-by: Hans Zandbelt <hans.zandbelt@zmartzone.eu>
(cherry picked from commit bcbdd1993e7449446cb34df696826bd8bc9d2977)
---
 auth_openidc.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/auth_openidc.conf b/auth_openidc.conf
index 4012df3..ce2fba7 100644
--- a/auth_openidc.conf
+++ b/auth_openidc.conf
@@ -431,6 +431,12 @@
 #   state cookie: Lax
 #   session cookie: first time set Lax, updates (e.g. after inactivity timeout) Strict
 #   x_csrf discovery: Strict:
+#
+# The default `SameSite=None` cookie appendix on `Set-Cookie` response headers can be 
+# conditionally overridden using an environment variable in the Apache config as in:
+#   SetEnvIf User-Agent ".*IOS.*" OIDC_SET_COOKIE_APPEND=;
+# (since version 2.4.1)
+#
 # When not defined the default is Off.
 #OIDCCookieSameSite [On|Off]
 
-- 
2.26.2