search

postmanlabs / postman-app-support

Postman is an API platform for building and using APIs. Postman simplifies each step of the API lifecycle and streamlines collaboration so you can create better APIs—faster.
https://www.postman.com
5.81k stars 839 forks source link

Cookies with Secure attribute not included for localhost #10185

Open jonathanazulay opened 3 years ago

jonathanazulay commented 3 years ago

Is there an existing issue for this?

Describe the Issue

When working with cookies having SameSite=None, browsers per standard requires the Secure attribute to be true in order to even set the cookie. This could potentially harm developer experience since most local dev environments are using insecure http://localhost. Chrome luckily has solved this by simply regarding localhost as "Secure" thus still including Secure cookies for http://localhost

I'm not sure how other browsers are doing it but I would be great if postman could do this as well. Seems like Secure cookies are added for neither localhost or localhost:3000.

Steps To Reproduce

  1. Open cookie window in request headers tab
  2. Add SecureCookiePostmanTest=foo; Secure; Path=/; HttpOnly; to localhost
  3. Do a reqeust towards localhost
  4. See how cookie is not included in Cookie response tab

Screenshots or Videos

No response

Environment Information

- Operating System: Mac OS 11.4
- Platform Type: Native App
- Postman Version: 8.9.0

Additional Context?

No response

vorou commented 2 years ago

The issue is still there for 9.13.0

numaga94 commented 2 years ago

Same issue with Version 9.14.7

dgallego58 commented 2 years ago

Related to #4581

Postman for Windows Version 9.18.2 UI Version 9.18.2-ui-220511-0750 Desktop Platform Version 9.16.0 Architecture x64 OS Platform win32 10.0.22000

ferrets6 commented 2 years ago

Same here! Postman v9.23.3 on Windows

vforvikash commented 2 years ago

same issue with Version 9.22.2 (9.22.2)

shiva2021 commented 1 year ago

same issue with Version 9.20.0-canary

ziring-tawfique commented 1 year ago

Still an issue Version 9.31.0 (9.31.0)

svenjungnickel commented 1 year ago

Still an issue in version 10.0.42 on Mac

MarceloBaeza commented 1 year ago

Still an issue in version 10.6.0 on Windows

jpangelle commented 1 year ago

same issue here. works on Insomnia though.

MacOS 12.5 Postman 10.6.7

DevPres commented 1 year ago

maybe this can help someone, https://stackoverflow.com/questions/74402197/cookie-in-thunder-client-vs-code-extension

for me, set {secure: false} in cookie work.

sameert89 commented 5 months ago

How is this still a problem.

scienceman001 commented 4 months ago

I have the same issue cookies on localhost not supported