1 files changed, 28 insertions, 0 deletions
diff --git a/app/controllers/concerns/kas_cookie.rb b/app/controllers/concerns/kas_cookie.rb
new file mode 100644
index 00000000000..c66bf7c9e8c
--- /dev/null
+++ b/app/controllers/concerns/kas_cookie.rb
@@ -0,0 +1,28 @@
+# frozen_string_literal: true
+
+module KasCookie
+  extend ActiveSupport::Concern
+
+  included do
+    content_security_policy_with_context do |p|
+      next unless ::Gitlab::Kas::UserAccess.enabled?
+
+      kas_url = ::Gitlab::Kas.tunnel_url
+      next if URI(kas_url).host == ::Gitlab.config.gitlab.host # already allowed, no need for exception
+
+      kas_url += '/' unless kas_url.end_with?('/')
+      p.connect_src(*Array.wrap(p.directives['connect-src']), kas_url)
+    end
+  end
+
+  def set_kas_cookie
+    return unless ::Gitlab::Kas::UserAccess.enabled?
+
+    public_session_id = Gitlab::Session.current&.id&.public_id
+    return unless public_session_id
+
+    cookie_data = ::Gitlab::Kas::UserAccess.cookie_data(public_session_id)
+
+    cookies[::Gitlab::Kas::COOKIE_KEY] = cookie_data
+  end
+end