Can't override BankIdConstants cookie names

[DennisCol]

Describe the bug
None of theses cookienames can be overridden:
public const string DefaultStateCookieName = "__ActiveLogin.BankIdUiState";
public const string DefaultDeviceDataCookieName = "__ActiveLogin.BankIdDeviceData";
public const string DefaultUiOptionsCookieName = "__ActiveLogin.BankId.UiOptions";

What area is it related to
API

Expected behavior
As the constants are named Default* there should be a way to override them.

NuGet package version
11.1.3

Runtime version
.NET 8.0

[torselden]

Thanks for reporting this. I agree there is an API inconsistency here.

• The state cookie can currently be renamed through BankIdAuthOptions.StateCookie.Name.
• The device-data cookie has a DeviceDataCookie property on the resolver, but the default resolver does not expose a straightforward options configuration hook.
• The UI-options cookie is currently always written using the hard-coded DefaultUiOptionsCookieName, so there is no equivalent public configuration for it.

Could you let us know what prompted the need to override the names? For example, is this due to multiple BankID schemes/applications sharing the same host, or a collision with another cookie? That will help us decide whether the names should be configured per scheme or through a shared BankID options object.

At minimum, the UI-options cookie should probably use a configurable CookieBuilder, and the device-data cookie should have a supported configuration path as well. The state-cookie configuration could then be made consistent with those APIs.