Google delays phase-out of third-party cookies on Chrome yet again

This completely breaks iframes that use session cookies for authentication. The Storage Access API (https://developers.google.com/privacy-sandbox/3pcd/storage-a...), which is the supposed way around this is very much still a work in progress ("Work is continuing to resolve all remaining blocking issues, before standardizing the API.") - and it seems ridiculous that they'd sunset 3rd party cookies before this is fully baked / supported (not to mention that the UX of the flow is very rough).

I'm really hoping this gets knocked down by regulators. It's really all to do with anti-competitive behavior from google ads, and nothing to do with privacy - all the big players have already long-since moved on, because of ad-revenue has shifted to mobile.

More discussion in https://news.ycombinator.com/item?id=40143242 (though this is a better source).

Wouldn't removing 3rd party cookies break oidc / oauth2?

At least Keycloak on SPA won't work without.