OAuth2 state

CookieState

To configure the CookieState provider you must use the CookieStateSettings class. This class has the following form:

Scala

case class CookieStateSettings(
  cookieName: String = "OAuth2State",
  cookiePath: String = "/",
  cookieDomain: Option[String] = None,
  secureCookie: Boolean = Play.isProd,
  httpOnlyCookie: Boolean = true,
  expirationTime: Int = 5 * 60)

Property	Description
cookieName	The cookie name
cookiePath	The cookie path
cookieDomain	The cookie domain
secureCookie	Whether this cookie is secured, sent only for HTTPS requests. Default to sending only for HTTPS in production, but not for development and test
httpOnlyCookie	Whether this cookie is HTTP only, i.e. not accessible from client-side JavaScript code
expirationTime	State expiration. Defaults to 5 minutes which provides sufficient time to log in, but not too much. This is a balance between convenience and security