WooCommerce make cart session functional inside an iframe .md

WooCommerce make cart session functional inside an iframe .md

If you need your woocommerce cart functions to work while inside an iframe, you have to add this code in your theme's functions file (or plugin's function file):

function iframe_cookies_samesite_filter_wc_session($enabled, $name, $value, $expire, $secure)
{
    if ( ! headers_sent() ) {
        setcookie($name, $value, [
            'secure'   => true,
            'httponly' => apply_filters( 'woocommerce_cookie_httponly', $httponly, $name, $value, $expire, $secure ),
            'samesite' => 'None', // Cookies will be sent in all contexts
            //'samesite' => 'Lax', // play around with lax if "none" does not work
            'path'     => COOKIEPATH ? COOKIEPATH : '/',
            'expires'   => $expire,
            'domain'   => COOKIE_DOMAIN,
        ]);
    } elseif ( Constants::is_true( 'WP_DEBUG' ) ) {
        headers_sent( $file, $line );
        trigger_error( "{$name} cookie cannot be set - headers already sent by {$file} on line {$line}", E_USER_NOTICE ); // @codingStandardsIgnoreLine
    }
    return false;
}
add_filter('woocommerce_set_cookie_enabled', 'iframe_cookies_samesite_filter_wc_session', 10, 5 );

For the checkout page to work add this to the theme's functions file:

// REMOVE X-Frame-Options because ios does not work
remove_action('template_redirect', 'wc_send_frame_options_header');
remove_action('admin_init', 'send_frame_options_header');
remove_action('login_init', 'send_frame_options_header');
remove_action('init', 'send_frame_options_header');

Please beware payment processors don't usually work inside iframe because they include "X-Frame-Options" header for security reasons. You must redirect to the payment processor page with javascript:

if (window.location !== window.top.location) {
    window.top.location.href = location.href;
}

Thanks for the code, it works almost everywhere, but not in Safari :( Do you have any advice on how to deal with it?

Thanks a lot for your willingness, I'm at my wits' end.

@sgdboro On safari it only works if the iframe is on the same domain/subdomain.
For example woocommerce is shop.yoursite.com and you put the iframe on yoursite.com/something.

I searched for every possible solution when i wrote this gist. There is one more solution: the end-users have to disable "Prevent cross site tracking." in iOS settings > Safari > Preferences > Privacy, or something like this.

Thanks for your help @AndreiTelteu !
Actually this code can be rewritten (from 6.7.0) using woocommerce_set_cookie_options hook. Look the attached screenshot of the source code.