Any backend / frontend devs here? I have this Set-Cookie header

Question

Any backend / frontend devs here? I have this Set-Cookie header

to save access_token in frontend's cookie.
It has httpOnly; Secure; SameSite=None; attributes. It worked for localhost to api, localhost to localhost ( different port ) etc.

my urls are like https://api.asd.com and https://portal.asd.com.

It's not working in Safari. So reading through stackoverflow, Safari don't like SameSite=None so I changed it to SameSite=Lax Works on every browser except localhost to server what's happening and what should I do?

My header is like this now
Set-Cookie: Authorization=magic; httpOnly; SameSite=Lax; MaxAge=3600; Secure; Doman=.asd.com; ( Works on all browser except localhost (FE) to https://api.asd.com)

0

22.08.2023

6 ответов

17 просмотров

akza07 Автор вопроса

David
Need to be on same domain to set/send cookies

api.domain.co & portal.domain.co are domain.co ryt?

0

22.08.2023

David

akza07
api.domain.co & portal.domain.co are domain.co ryt...

yes

0

22.08.2023

akza07 Автор вопроса

David
yes

localhost & portal are not. but Samesite=None & Secure:true works. why?

0

22.08.2023

David

akza07
localhost & portal are not. but Samesite=None & Se...

What do you mean it works? If there's no restrictive CORS policy, the request will get sent. But I don't think the Set-Cookie response headers work

0

22.08.2023

akza07 Автор вопроса

David
What do you mean it works? If there's no restricti...

They worked & Set the cookie on both localhost-domain & doman-subdomain. Which i dont understand how. only safari blocked it. which needed privacy shering in settings to be turned off

0

22.08.2023

David · Accepted Answer

David

Need to be on same domain to set/send cookies

0

22.08.2023

Похожие чаты

Any backend / frontend devs here? I have this Set-Cookie header

6 ответов

Похожие вопросы