search

edwardspresume / sveltekit-lucia-auth-v3-example

This example project showcases how to integrate Lucia V3 for user authentication in a SvelteKit application. User data is stored in a local SQLite database
MIT License
42 stars 3 forks source link

Local testing, non-HTTPS cookie #4

Open aabbtree77 opened 6 months ago

aabbtree77 commented 6 months ago

This could be a very minor thing as it happened to me once and I cannot even reproduce it anymore, but I will mention it just in case.

When I registered and deleted myself in Dashboard, I went on to register again, but I could no longer do this and console revealed the following errors:

  1. Password fields present on an insecure (http://page). This is a security risk that allows user login credentials to be stolen. [Learn More].

  2. Cookie "pendingUserVerification" has been rejected because a non-HTTPS cookie can't be set as "secure".

After refreshing the landing page, everything worked again, and I could not get these errors anymore. It could have been some tab/window closing involved or I messed up with a database in parallel at CLI, cannot recall these details, but this problem can happen.

edwardspresume commented 5 months ago

Hi,

Pardon the delay, I'll test things out and see if I can reproduce the issue, when I get a chance, maybe by next weekend