---
title: "Breaking: #93073 - AbstractUserAuthentication->forceSetCookie removed"
manual: "TYPO3 Core Changelog"
version: "main"
permalink: "https://docs.typo3.org/permalink/changelog:breaking-93073"
source: "Changelog/11.0/Breaking-93073-AbstractUserAuthentication-forceSetCookieRemoved.rst"
typo3-version: "11.0"
typo3-major: 11
type: "breaking"
issue: 93073
forge: "https://forge.typo3.org/issues/93073"
tags: ["Backend", "Frontend", "PHP-API", "FullyScanned", "ext:core"]
rendered: "2026-09-17T21:17:42+00:00"
---

# Breaking: #93073 - AbstractUserAuthentication->forceSetCookie removed {#breaking-93073-abstractuserauthentication-forcesetcookie-removed}

See [forge#93073](https://forge.typo3.org/issues/93073)

## Description {#description}

The public property `forceSetCookie`
is removed from the PHP class `AbstractUserAuthentication`.

This property served to ensure that a cookie should be added
at any times, which is useful for time-based cookies, which only
happen in Frontend user sessions. This property is now moved as a protected
property into the `FrontendUserAuthentication` class and used in this class
solely to reduce the complexity of the internal logic as well as outside API.

## Impact {#impact}

Setting this property has no effect anymore, setting this property on a Frontend User object will trigger a PHP warning.

## Affected Installations {#affected-installations}

TYPO3 installations with third-party extensions and special cookie handling, which is very unlikely.

## Migration {#migration}

If custom functionality for setting cookies is needed, it is highly
recommended to send cookies manually via a PSR-15 middleware.