You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cordova.apache.org by "ehxxxxxxxxxxxxxxxxxxxxxxx (via GitHub)" <gi...@apache.org> on 2023/07/27 10:36:38 UTC
[GitHub] [cordova-android] ehxxxxxxxxxxxxxxxxxxxxxxx opened a new issue, #1638: No cookies sent in the request after upgraded cordova android from 6.2.3 to 12
ehxxxxxxxxxxxxxxxxxxxxxxx opened a new issue, #1638:
URL: https://github.com/apache/cordova-android/issues/1638
Hi, Recently we upgraded the cordova android to 12 due to the requirement of goole play. We found that the request sent by the app does not have cookie， and server will renew the sessionid for each request. The backend server is jetty server. I've tried almost everything, including the previous reply to someone else, but it still doesn't work. Someone asked this question before, but in the end he chose other authentication methods. Is there any other way to solve this problem? Thanks!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
[GitHub] [cordova-android] ehxxxxxxxxxxxxxxxxxxxxxxx commented on issue #1638: No cookies sent in the request after upgraded cordova android from 6.2.3 to 12
Posted by "ehxxxxxxxxxxxxxxxxxxxxxxx (via GitHub)" <gi...@apache.org>.
ehxxxxxxxxxxxxxxxxxxxxxxx commented on issue #1638:
URL: https://github.com/apache/cordova-android/issues/1638#issuecomment-1655121268
hi @breautek we have set the frontend scheme http, hostname localhost in the preference element and the backend SameSite policy to none; Secure. but it still doesn't work. The DevTools shown as below：
first request:
second request:
Even if we change the backend to https it doesn't work
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
[GitHub] [cordova-android] breautek closed issue #1638: No cookies sent in the request after upgraded cordova android from 6.2.3 to 12
Posted by "breautek (via GitHub)" <gi...@apache.org>.
breautek closed issue #1638: No cookies sent in the request after upgraded cordova android from 6.2.3 to 12
URL: https://github.com/apache/cordova-android/issues/1638
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org
[GitHub] [cordova-android] breautek commented on issue #1638: No cookies sent in the request after upgraded cordova android from 6.2.3 to 12
Posted by "breautek (via GitHub)" <gi...@apache.org>.
breautek commented on issue #1638:
URL: https://github.com/apache/cordova-android/issues/1638#issuecomment-1653427622
Any device running a semi-modern chrome webview (v90+) while targeting API 31+ will use a more restrictive cookie policy by default where it will block any cookie that isn't on the "SameSite" which would apply to any webview app that isn't loading the document from the server itself.
The server must set the SameSite policy `SameSite` policy to `none; Secure` to allow cross origin cookies. `Secure` is required because the user agent will refuse cross origin cookies unless if the connection is on a secure context (e.g. https). More information can be found here: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value
Related: https://github.com/apache/cordova-android/issues/1187#issuecomment-1129556930
Closing because this isn't a bug with the Cordova Framework that we can take action on.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@cordova.apache.org
For additional commands, e-mail: issues-help@cordova.apache.org