feat: add support for cookie partition

Related: hapijs/statehood#88

Author: Marsup

API.md

@@ -312,6 +312,7 @@ Default value:
     isSecure: true,
     isHttpOnly: true,
     isSameSite: 'Strict',
+    isPartitioned: false,
     encoding: 'none'
 }
 ```
@@ -2533,6 +2534,8 @@ across multiple requests. Registers a cookie definitions where:
         - `'Lax'` - sets the value to `'Lax'`.
         - `'None'` - sets the value to `'None'`.
 
+    - `isPartitioned` - sets the ['Partitioned' flag](https://developers.google.com/privacy-sandbox/3pcd/chips). Defaults to `false`. Requires `isSecure` to be `true` and `isSameSite` to be `'None'`.
+
     - `path` - the path scope. Defaults to `null` (no path).
 
     - `domain` - the domain scope. Defaults to `null` (no domain).

package.json

@@ -37,7 +37,7 @@
     "@hapi/podium": "^5.0.1",
     "@hapi/shot": "^6.0.1",
     "@hapi/somever": "^4.1.1",
-    "@hapi/statehood": "^8.1.1",
+    "@hapi/statehood": "^8.2.0",
     "@hapi/subtext": "^8.1.0",
     "@hapi/teamwork": "^6.0.0",
     "@hapi/topo": "^6.0.2",

test/state.js

@@ -212,4 +212,28 @@ describe('state', () => {
         expect(res.statusCode).to.equal(200);
         expect(res.headers['set-cookie']).to.equal(['a=b; HttpOnly; SameSite=TEST']);
     });
+
+    it('sets cookie partitioned value', async () => {
+
+        const server = Hapi.server();
+
+        server.state('a', { isPartitioned: true, isSameSite: 'None' });
+        server.route({ method: 'GET', path: '/', handler: (request, h) => h.response('ok').state('a', 'b') });
+
+        const res = await server.inject('/?x=TEST');
+        expect(res.statusCode).to.equal(200);
+        expect(res.headers['set-cookie']).to.equal(['a=b; Secure; HttpOnly; SameSite=None; Partitioned']);
+    });
+
+    it('fails to set cookie partitioned value without isSameSite=None', async () => {
+
+        const server = Hapi.server({ debug: false });
+
+        server.state('a', { isPartitioned: true });
+        server.route({ method: 'GET', path: '/', handler: (request, h) => h.response('ok').state('a', 'b') });
+
+        const res = await server.inject('/?x=TEST');
+        expect(res.statusCode).to.equal(500);
+        expect(res.request.response._error).to.be.an.error('Partitioned cookies must have SameSite=None');
+    });
 });