[Question] No Sanctum token cookie is saved when using token mode in Safari

[michaeldojcar]

Hi, thanks for nice module. I am struggling with the new token mode.

Describe the bug

When I try to log in to app with token mode in current Safari, it won't save Sanctum token cookie and /api/user request throws error 401 Unauthenticated. In Chrome the token cookie is saved and user can login and call /api/user route without any problems.

To Reproduce

Steps to reproduce the behavior:

Try to login in Safari. Mode: token is set in nuxt.config.ts.

Expected behavior

In chrome token is saved correctly and everything works right.

Screenshots

Chrome cookie is saved correctly:

In Safari nothing appear in cookies:

Module information

• Version: 0.4.1
• Complete configuration of sanctum from your nuxt.config.ts:

export default defineNuxtConfig({
    devtools: {enabled: true},
    css: ['~/assets/scss/main.scss'],
    ssr: false,

    postcss: {
        plugins: {
            tailwindcss: {},
            autoprefixer: {},
        },
    },

    modules: ["nuxt-auth-sanctum"],

    sanctum: {
        baseUrl: 'http://localhost:8000',
        redirect: {
            onLogin: '/', // Custom route after successful login
            onAuthOnly: '/login',
            onGuestOnly: '/',
            onLogout: '/login',
        },
        endpoints: {
            login: '/api/login',
            logout: '/api/logout',
            user: '/api/user',
        },
        globalMiddleware: {
            enabled: true,
        },
        mode: 'token'
    },
})

Nuxt environment:

• Version: 3.12.2
• SSR Enabled: no
• Environment: local

[michaeldojcar]

Edit: It is working on production, so maybe it's related to my local environment.

[manchenkoff]

Hey @michaeldojcar, I tried to reproduce it in Safari, but no luck 😞 I would suggest checking Safari security-related settings or so because I believe it has nothing to do with the module, especially since you mentioned that in Chrome and Prod it's alright.

[manchenkoff]

Closing due to inactivity