Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Can't set cookies when frontend and api are on different hosts #54

Open
Exotelis opened this issue May 9, 2021 · 0 comments
Open
Labels
api Related to the api bug Something isn't working documentation Improvements or additions to documentation

Comments

@Exotelis
Copy link
Owner

Exotelis commented May 9, 2021

Due to the samesite restrictions of a cookie, the cookie cannot be set when the frontend is deployed on a different host than the api. When the frontend and api url are different the samesite attribute should be None. It's probably possible to set the samesite to strict if the host is the same (tbd).
This can be fixed in the AuthController

The cors settings can also be updated, the allowed origin should be the frontend and not a *
This can be fixed in the cors configuration file.

@Exotelis Exotelis added bug Something isn't working documentation Improvements or additions to documentation api Related to the api labels May 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api Related to the api bug Something isn't working documentation Improvements or additions to documentation
Projects
None yet
Development

No branches or pull requests

1 participant