Hi cookie based auth is not working on

Question

Hi cookie based auth is not working on desktop Safari is that expected

tom-glyphic · Answer

The signin request works and we see the cookie being sent in subsequent requests but they fail to authenticate

tom-glyphic · Answer

Sample debug log output https cdn discordapp com attachments 1097824596318765088 1097825110729162792 message txt

tom-glyphic · Answer

It s the case that our api domain and website domain are different is the solution to switch to header based auth https github com supertokens supertokens core issues 280

rp · Answer

yup You need to switch to using header based auth

rp · Answer

since safari doesn t allow cross site cookies even with sameSite as `none`

tom-glyphic · Answer

OK thanks are there any downsides from using the header based auth I see it s not the recommended method

rp · Answer

it s less secure since the access and refresh tokens are exposed to frontend JS

rp · Answer

but we do refresh token rotation so it s such a big issue anyway

tom-glyphic · Answer

OK thanks