How to set SameSite value to None in .net 4.5.2?

Question

When redirected back to my site from the third party site user session becoming empty. I have checked Response.Cookies["ASP.NET_SessionId"]; sets new value after redirect. By default, ASP.NET_SessionId it sets as Lax. Any possible way to change SameSite value in Session_Start of .net framework 4.5.2 or possible anywhere?

Answer 1

Couple options to work around this constraint with older versions of the .net framework

HttpContext.Current.Response.Headers.Append("set-cookie", $"{key}={value}; path=/; SameSite=Strict; Secure");

Is one option for setting the headers manually with the SameSite defined. Above, key is the cookie name, value is the cookie value

Alternatively:

myCookie.Path = "/; SameSite=Strict; Secure";

I've tested these options, both appear to work

Values listed above are for examples only, you will need to supply the appropriate values [Lax|Strict|None|etc]. The Secure flag indicates that its transmitted over https only. Ymmv