Sichere Cookies für Shopware 6

# config/packages/framework.yaml — Session-Cookies
framework:
    session:
        # Cookie-Sicherheit
        cookie_secure: auto
        cookie_httponly: true
        cookie_samesite: lax
        # Session-Lebensdauer (Standard: 7200 = 2h)
        gc_maxlifetime: 7200
        # Cookie-Name anpassen (optional)
        name: sw_session

// EventSubscriber für zusätzliche Cookie-Header
public function onResponse(ResponseEvent $event): void
{
    $response = $event->getResponse();

    // Alle Cookies mit Secure und SameSite absichern
    foreach ($response->headers->getCookies() as $cookie) {
        if (!$cookie->isSecure()) {
            $response->headers->setCookie(
                Cookie::create($cookie->getName())
                    ->withValue($cookie->getValue())
                    ->withExpires($cookie->getExpiresTime())
                    ->withPath($cookie->getPath())
                    ->withDomain($cookie->getDomain())
                    ->withSecure(true)
                    ->withHttpOnly($cookie->isHttpOnly())
                    ->withSameSite('lax')
            );
        }
    }
}