Quarkus - modify JSESSIONID attributes

Solution 1:

I found the solution. It is not very clean but it works. First I've copied three classes from undertow sources. CookieSameSiteMode.java, SameSiteCookieHandler.java and SameSiteNoneIncompatibleClientChecker.java. Next I changed setting of sameSiteMode property because implementation of setSameSiteMode throws exception when value is not equal to "lax" or "strict" so I've to use reflection to set field value directly. Next I've added undertow-handlers.conf in META-INF directory with content samesite-cookie(mode='None', add-secure-for-none=true). Finally I've added io.undertow.server.handlers.builder.HandlerBuilder file in META-INF/services directory in which I registered my handler. Full example is available on my github