When running locally for development, cannot login with Firefox

Question

When running locally for development, cannot login with Firefox

EcBen opened this issue 3 years ago · comments

Ben at Emergent Cybernetics commented 3 years ago

I'm not sure what's causing this, but it's working fine in Chrome.

In Firefox, entering the user/pass seems to work, but when redirected to the ReturnUrl page and it loads, the user gets logged out and redirected back to the login page.

Here's a screenshot of the console log and the Firefox dev tools log:

It probably has something to do with the SameSite cookie setting?

[13:17:11 WRN] The cookie 'idsrv.session' has set 'SameSite=None' and must also set 'Secure'.

Giovanni Quarella · Answer 1 · Sat Jan 22 2022 05:07:51 GMT+0800 (China Standard Time)

There was a similar issue with Chrome, so it depends on how browser manages cookies and from version to version this can change.
Do you experience the same with https?

Ben at Emergent Cybernetics · Answer 2 · Sat Jan 22 2022 05:24:19 GMT+0800 (China Standard Time)

No, it seems to be fine when running with https. From here src/Server/BlazorBoilerplate.Server:

dotnet run --urls=https://*:53416

Chrome and Firefox logins work.
Then only using http, Firefox logins do not:

dotnet run --urls=http://*:53416

It was working a month or so ago in Firefox for http.

Giovanni Quarella · Answer 3 · Sat Jan 22 2022 18:14:40 GMT+0800 (China Standard Time)

here https://github.com/enkodellc/blazorboilerplate/blob/master/src/Server/BlazorBoilerplate.Server/Extensions/SameSiteHandlingExtensions.cs#L21

you can set cookies Secure to make experiments with Firefox