4,843 questions
-2
votes
0
answers
6
views
Chrome logs me out of all sites on every restart (Windows 11) [migrated]
I’m facing a weird Chrome issue.
Every time I fully close Chrome and reopen it, I’m logged out of almost all websites — ChatGPT, ClickUp, Substack, etc.
Google services (Gmail, Meet) stay logged in.
...
- 1
Advice
1
vote
1
replies
51
views
How to use csrf-csrf with Express and cookie based sessions in Node.js
I’m building a Node.js web app using Express, Nunjucks as the templating engine and cookie-session library for storing user sessions in cookies. I’d like to use the csrf-csrf library to add CSRF ...
- 506
0
votes
0
answers
23
views
Handle Missing AAD B2C Session Cookies
My application shows the following session cookies from AAD B2C after a user has signed-in successfully (masked some parts):
It works fine. Even if the browser is closed and reopened and these ...
- 3,661
0
votes
2
answers
135
views
My authentication setup requires a setTimeout before redirect to allow cookies to write in the browser
Authentication flow:
User is redirected back to my site (to /auth/callback) after logging in with a 3rd party. The redirect back includes query params. The React function on the callback page sends ...
- 7
1
vote
0
answers
65
views
Express' res.clearCookie() does not clear the cookie?
I assign the cookie here:
const sessionEnd = new Date(Date.now() + ( 1000 * 60 * 60 * 24 ));
const cookieOptions = {path: "/", expires: sessionEnd, httpOnly: false};
async function ...
- 31
1
vote
1
answer
101
views
gin-contrib/sessions creating new session for every request
I'm trying to use gin-contrib/sessions but every time I make a request to the server a new session is created. It is never finding a previously created session and I can't access any data that should ...
- 799
0
votes
0
answers
52
views
HTTP/2 in my GET Request not present for one of my Endpoints endpoint in java (Springboot)
I wanted to ask that there is something wrong with one of my endpoints, the endpoint seems to be blocked for some reasons, I have other endpoints that are giving response but this one fails.See the ...
0
votes
0
answers
41
views
Need help setting headers for ERPNEXT API endpoint
I have a next.js app that sends a delete request to the ERPNext backend from the next.js application.
The issue occurs on production only (i.e. the deployed next.js app) but works flawlessly on local. ...
- 15
0
votes
0
answers
114
views
Django Admin ask for login on every click
Working on a Django project deployed on AWS. In production, I'm facing a session-related issue:
When I open the Django admin site (/admin) and log in, everything works smoothly. But if I open the user ...
- 13
-1
votes
1
answer
72
views
Setting cookie security flags for WordPress multisite [closed]
Any suggestions on how to get this done?
Need these settings to be implemented for all cookies (not just WordPress cookies): Secure, HttpOnly, and SameSite=Lax.
We are considering implementing this ...
- 1
1
vote
0
answers
53
views
req.session returns without data, session cookie exists but data missing (Express + Render/Vercel)
I’m trying to deploy a MERN stack website that I’ve been working on locally. While everything works fine locally, after deploying to Render and Vercel, I can’t access session data through req.session. ...
- 11
0
votes
0
answers
48
views
k6 reports expiry in the 18th century for all cookies
I'm a new QA, and I'm using k6 with Typescript to test a web app. I noticed that http requests that rely on cookies aren't working correctly in the test script, although they do work when using the ...
- 1
2
votes
0
answers
80
views
Zombie session after expiring cookies using Java Servlets
I have inherited some JAX-RS code with a logout function that appears to be properly "logging out" the user by redirecting to the login page, invalidating the session, and expiring the ...
- 765
3
votes
2
answers
258
views
Nuxt 3 and Laravel 12 Sanctum SPA Authentication Generating New Session Every Request
Here's the situation I'm facing in my project:
Stack:
Backend: Laravel 12 (session driver: database, Sanctum SPA authentication)
Frontend: Nuxt 3
Backend runs at: localhost:8000
Frontend runs at: ...
- 31
0
votes
1
answer
322
views
OIDC with lua-resty-openidc 4.0.5-1: "no session state found" after redirect from ipprovider
I'm implementing OIDC authentication using lua-resty-openidc in an NGINX reverse proxy. The authentication flow redirects correctly to the Identity Provider , but after the user logs in and is ...
- 1