Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cookieSameSite resolution issue #506

Open
rishabhpoddar opened this issue Mar 4, 2023 · 0 comments
Open

cookieSameSite resolution issue #506

rishabhpoddar opened this issue Mar 4, 2023 · 0 comments

Comments

@rishabhpoddar
Copy link
Member

rishabhpoddar commented Mar 4, 2023

When setting websiteDomain to http://127.0.0.1:5173 and apiDomain to http://localhost:3001, then cookieSameSite is resolved to lax, but it should actually resolve to none, and not allow the user to sign in (since http is used on the backend apiDomain)

Another issue is that if using ngrok for frontend and backend, for example:

https://7473-103-36-81-164.ngrok-free.app/ website domain
https://9a89-103-165-71-87.ngrok-free.app/ api domain

The the same site is resolved as lax instead of none

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant