https://github.com/eclipse-ee4j/faces-api/issues/1570

Prepare support for SameSite; Servlet 5.1.0-M1 should be out by now but
isn't in Maven yet

Author: BalusC

impl/pom.xml

@@ -50,7 +50,7 @@
         <dependency>
             <groupId>jakarta.servlet</groupId>
             <artifactId>jakarta.servlet-api</artifactId>
-            <version>5.0.0</version>
+            <version>5.1.0-M1</version>
             <scope>provided</scope>
         </dependency>
 

impl/src/main/java/com/sun/faces/context/ExternalContextImpl.java

@@ -103,7 +103,7 @@ public class ExternalContextImpl extends ExternalContext {
     private boolean distributable;
 
     private enum ALLOWABLE_COOKIE_PROPERTIES {
-        domain, maxAge, path, secure, httpOnly
+        domain, maxAge, path, secure, httpOnly, SameSite
     }
 
     static final Class theUnmodifiableMapClass = Collections.unmodifiableMap(new HashMap<>()).getClass();
@@ -794,6 +794,8 @@ public void addResponseCookie(String name, String value, Map<String, Object> pro
                 case httpOnly:
                     cookie.setHttpOnly((Boolean) v);
                     break;
+                case SameSite:
+                    cookie.setAttribute("SameSite", (Boolean) v);
                 default:
                     throw new IllegalStateException(); // shouldn't happen
                 }

impl/src/main/java/jakarta/faces/context/ExternalContext.java

@@ -118,7 +118,7 @@ public abstract class ExternalContext {
      *
      * <tr>
      *
-     * <th>Key in "values" <code>Map</code></th>
+     * <th>Key in "values" <code>Map</code> <span class="changed_added_4_0">(case sensitive)</th>
      *
      * <th>Expected type of value.</th>
      *
@@ -186,6 +186,16 @@ public abstract class ExternalContext {
      *
      * </tr>
      *
+     * <tr class="changed_added_4_0">
+     *
+     * <td>SameSite</td>
+     *
+     * <td>Boolean</td>
+     *
+     * <td>setAttribute</td>
+     *
+     * </tr>
+     *
      * </table>
      *
      * <p>