[Bug] Can't set cookies when frontend and api are on different hosts #54
Labels
api
Related to the api
bug
Something isn't working
documentation
Improvements or additions to documentation
Due to the samesite restrictions of a cookie, the cookie cannot be set when the frontend is deployed on a different host than the api. When the frontend and api url are different the samesite attribute should be None. It's probably possible to set the samesite to strict if the host is the same (tbd).
This can be fixed in the AuthController
The cors settings can also be updated, the allowed origin should be the frontend and not a *
This can be fixed in the cors configuration file.
The text was updated successfully, but these errors were encountered: