Category "cookies"

Why am I getting "Indicate whether to send a cookie in a cross-site request by specifying its SameSite attribute"?

In a Chrome warning, it says: Specify SameSite=None and Secure if the cookie should be sent in cross-site requests. This enables third-party use. How do I do

ActionDispatch::Cookies not setting Set-Cookie header in response but response.set_cookie does

I have a Rails 5 API only app and want to send cookies in the response of a JSON request. When I use ActionDispatch::Cookies to set a cookie in the response of

Authentication on Keycloak through REST API (Next JS)

I have a problem. I need to login in Keycloak, but i don't want to use default pages from Keycloak. I have pages for "sign-in" and "sign-up". I wrote requests a

SvelteKit API requests with Axios JWT authentication

I am creating an app with a SvelteKit client and a Laravel API stack, but I am struggling to safely authenticate my client to my API. Ideally I want to store a

How to prevent sending cookies from UI using react to backend for selective apis

In our application , there are certain cookies related to analytics etc which are being sent as part of every request api from frontend, we are not explicity se

Modify Request Headers Using ExpressJs

Is it possible to modify request headers using ExpressJs? I have an expressjs app server that interfaces with multiple backend services and I'd like to have thi

How worried should I be about opening up a JWT to an XSS vulnerability?

I am building a node.js web application with react for the the GUI and graphQL served with Apollo for the back-end connecting to a RDS (MySQL) instance on AWS.

Protected Route by checking JWT saved in user's cookie

I just finished implementing Google social authentication in my NextJS + DjangoRest project following this blog post. I am trying to figure out how to make prot

Secure Cookies not working with hostname set in hosts file

I have cookies set as secure, but it's working as localhost. But with the domain name set in the hosts file, chrome is not sending the cookies to server resulte

How to use JWT stored in cookie in NEXT _middleware

This question extends my last question and is primarily for me who might get stuck again. I'm trying to rebuild an app in Next.js that has this login form using

How to get sessionid instagram using javascript?

I want to extract instagran sessionid using document.cookies to showing up the cookie but the sessionid is not showing up, only this mid=YdIkCAALAAHf5L950uIGxAk

Reading Cookie from React (backend with FastAPI + fastapi-jwt-auth)

I am having some problems with understanding JWT in Cookie using Axios and FastAPI. I am trying to make a simple application with React for the frontend and Fas

Can't Access Cookie in HTTP Response with Flutter

I'm working on Flutter an app which will use Express based REST api. While implementing Cookie based sessions, I wanted to retrieve cookies from app with basic

Successful Login to API; Unsuccessful at accessing any data due to being unauthorized

I am attempting to come up with a live leaderboard for my local club using the PDGA's (Professional Disc Golf Association) API. I am writing a Google Apps Scrip

In chrome website rendering in iframe with different domain is unable to set and get cookies

Website a.com is rendering b.com in iframe. When running website b.com alone, everything is working fine. But when running a.com, website b.com is unable to set

admin pages in Next js that only authorized users

I have admin pages in Next js that only authorized users should have access to. I have a cookie verification service: import { NextApiRequest } from 'next' impo

Sending cookies/sessions to subdomains

As the title says, I'm trying to set cookies/sessions on the browser. To preface: Frontend: https://www.example.com Backend: https://api.example.com Frontend ma

How to use cookie inside `getServerSideProps` method in Next.js?

I have to send current language on endpoint. But getting language from Cookie returns undefined inside getServerSideProps. export async function getServerSidePr

SetCookie() couldn't set dot prefix for domain

package main import ( "time" "github.com/gin-gonic/gin" ) func main() { r := gin.Default() r.GET("/ping", func(c *gin.Context) { c.Se

How do you view cookies set via AJAX CORS requests in Chrome dev tools?

I'm seeing rather confusing behaviour in Chrome. Cookies that I set via a cross-origin AJAX request don't show up in the browser's dev tools inspector. I'm sure