1

Microsoft has removed P3P policy, through this we can read and create third party cookie in IE on windows 8.1 and earlier. But after removing this we can't create or read third party cookies.

We have on centralize system for authentication on http://a.com and we create cookies on http://a.com when user get login on http://b.com or http://c.com through JSONP request and read cookies always from http://a.com for checking user is loggedin or not and we share session across all our websites by this technique. But now it is not working in IE11 on windows 10 because we can't create cookies when use get logged in and can't read cookies on other site.

Govind Malviya
  • 13,627
  • 17
  • 68
  • 94

1 Answers1

1

If I'm reading your question correctly, server A (http://a.com) always knows whether the user is logged in or not.

You should be able to query A to get the authentication state from a page hosted on another domain using AJAX. This is not permitted by default in order to prevent cross-site scripting, but you can allow it by configuring A to include CORS headers in each HTTP response.

Martin Wiboe
  • 2,119
  • 2
  • 28
  • 50