search

DuendeSoftware / Support

Support for Duende Software products
20 stars 0 forks source link

missing cookie when redirecting back from callback request #1404

Open Rahul21199 opened 4 days ago

Rahul21199 commented 4 days ago

Duende IdentityServer- 7.0.6

.NET- 8

Issue- We're encountering an issue with the duende identity server in the following scenario: When we're redirected to the SSO login page via our application and wait for around 2 minutes before attempting to log in, we encounter an error.

Upon further investigation, it appears that the cause of this issue is the absence of the one cookie in the call back request. It seems that if we remain on the SSO login page for more than 2 minutes, this cookie is somehow deleted.

We have not removed the cookie manually also it's expiry is 15 min. Can any help to understand what is causing removal of this cookie from the request?

Adding some additional details. I tried by adding some other custom cookies for testing and they are also getting removed after 2 min and seems all this happing when calling duende callback method.

Rahul21199 commented 2 days ago

The issue is fixed by adding SameSite = SameSiteMode.None in the cookie request.