From 7f6fb45d9a60fd054e6f717240fe3fd2d1b44795 Mon Sep 17 00:00:00 2001
From: guzmud <ferdinand.bellissime@filigran.io>
Date: Tue, 21 Apr 2026 16:13:28 +0200
Subject: [PATCH] [client-python] fix(backend): no more cookies by default
 (#209)

---
 pyoaev/backends/backend.py    |  2 ++
 test/backends/test_backend.py | 11 +++++++++++
 2 files changed, 13 insertions(+)
 create mode 100644 test/backends/test_backend.py

diff --git a/pyoaev/backends/backend.py b/pyoaev/backends/backend.py
index c4faf23..f443110 100644
--- a/pyoaev/backends/backend.py
+++ b/pyoaev/backends/backend.py
@@ -1,5 +1,6 @@
 import dataclasses
 import json
+from http.cookiejar import DefaultCookiePolicy
 from typing import TYPE_CHECKING, Any, BinaryIO, Dict, Optional, Union
 
 import requests
@@ -67,6 +68,7 @@ def json(self) -> Any:
 class RequestsBackend(protocol.Backend):
     def __init__(self, session: Optional[requests.Session] = None) -> None:
         self._client: requests.Session = session or requests.Session()
+        self._client.cookies.set_policy(DefaultCookiePolicy(allowed_domains=[]))
 
     @property
     def client(self) -> requests.Session:
diff --git a/test/backends/test_backend.py b/test/backends/test_backend.py
new file mode 100644
index 0000000..5e85b8b
--- /dev/null
+++ b/test/backends/test_backend.py
@@ -0,0 +1,11 @@
+import unittest
+
+from pyoaev.backends import backend as module
+
+
+class TestRequestsBackend(unittest.TestCase):
+    def test_no_cookie_allowed(self):
+        backend = module.RequestsBackend()
+
+        self.assertIsNotNone(backend._client.cookies._policy.allowed_domains())
+        self.assertEqual(len(backend._client.cookies._policy.allowed_domains()), 0)