Any express / frontend devs here? I have this Set-Cookie header

Question

Any express / frontend devs here? I have this Set-Cookie header

to save access_token in frontend's cookie.
It has httpOnly; Secure; SameSite=None; attributes. It worked for localhost to api, localhost to localhost ( different port ) etc.

my urls are like https://api.asd.com and https://portal.asd.com.

It's not working in Safari. So reading through stackoverflow, Safari don't like SameSite=None so I changed it to SameSite=Lax Works on every browser except localhost to server what's happening and what should I do?

#english #programming

0

22.08.2023

6 ответов

12 просмотров

The Devs Bot

https://t.me/joinchat/FNPR30EU-CGZ2Fc9vb4lmQ

0

22.08.2023

akza07 Автор вопроса

The Devs Bot
https://t.me/joinchat/FNPR30EU-CGZ2Fc9vb4lmQ

It's not specific to Javascript but sure

0

22.08.2023

Sebastian

Why do does your cookie needs to be accessed by an program on localhost?

0

22.08.2023

akza07 Автор вопроса

Sebastian
Why do does your cookie needs to be accessed by an...

for development.

0

22.08.2023

Sebastian

Sebastian
Why do does your cookie needs to be accessed by an...

I would use SAML/oauth for these. Cookies like these are useless. Every site would have access to it and an attacker could easily use them. For testing i wouldn't use an public domain, but the .localhost.localdomain or the .localhost domain. Then i have no problem with the domain border.

0

22.08.2023

Fan / Ac · Accepted Answer

Fan / Ac

javascript group

0

22.08.2023

169 похожих чатов

Any express / frontend devs here? I have this Set-Cookie header

6 ответов

Похожие вопросы