Add config flag to enable httponly session cookies

Author: unandyala

packages/pwa-kit-dev/bin/pwa-kit-dev.js

@@ -253,11 +253,16 @@ const main = async () => {
                 error('Could not determine app entrypoint.')
                 process.exit(1)
             }
-
+            // Load config to get envBasePath from ssrParameters for local development
+            // This mimics how MRT sets the MRT_ENV_BASE_PATH system environment variable
+            const config = getConfig() || {}
+            const disableHttpOnlySessionCookies =
+                config.ssrParameters?.disableHttpOnlySessionCookies || true
             execSync(`${babelNode} ${inspect ? '--inspect' : ''} ${babelArgs} ${entrypoint}`, {
                 env: {
                     ...process.env,
-                    ...(noHMR ? {HMR: 'false'} : {})
+                    ...(noHMR ? {HMR: 'false'} : {}),
+                    MRT_DISABLE_HTTPONLY_SESSION_COOKIES: disableHttpOnlySessionCookies
                 }
             })
         })

packages/pwa-kit-react-sdk/src/ssr/server/react-rendering.js

@@ -365,6 +365,7 @@ const renderApp = (args) => {
         __CONFIG__: config,
         __PRELOADED_STATE__: appState,
         __ERROR__: error,
+        __MRT_DISABLE_HTTPONLY_SESSION_COOKIES__: process.env.MRT_DISABLE_HTTPONLY_SESSION_COOKIES,
         // `window.Progressive` has a long history at Mobify and some
         // client-side code depends on it. Maintain its name out of tradition.
         Progressive: getWindowProgressive(req, res)

packages/template-retail-react-app/config/default.js

@@ -103,6 +103,7 @@ module.exports = {
     ],
     ssrParameters: {
         ssrFunctionNodeVersion: '22.x',
+        disableHttpOnlySessionCookies: true,
         proxyConfigs: [
             {
                 host: 'kv7kzm78.api.commercecloud.salesforce.com',