Has anyone experienced session cannot be refreshed on electr

Question

Has anyone experienced session cannot be refreshed on electronjs In the network tab refresh call http localhost 3001 auth session refresh return 401 unauthorised

rp · Answer

hey

rp · Answer

can you enable backend debug logs and show the output

ray.npc · Answer

Sure this is debug logs output

ray.npc · Answer

From the logs idRefreshToken should be set after signin right but it is not found when the session is trying to refresh During the development running in localhost 4200 is working fine and session is working normally Also I have implemented windowHandler and cookieHandler based on the electron example Any suggestion can I go to solve this < rp>

rp · Answer

Hmmmm So the issue is only during prod

rp · Answer

Can I see the sign in request and response headers in prod

ray.npc · Answer

Yeah The issue happen in production code when the code is compile into electron app < rp>

ray.npc · Answer

the screenshot below is the signin request

ray.npc · Answer

Below this is the screenshot for refresh request with both request and response headers

rp · Answer

can you hover on the orange triangle in the set cookie response header What does it say

ray.npc · Answer

The orange triangle said This attempt to set a cookie via a Set Cookie header was blocked because it has the SameSite=Lax attribute but came from a cross site response which was not the response to a top level navigation

rp · Answer

Right Whats the value of APIDomain and websiteDomain on the backend

rp · Answer

The issue is that you need to set cookieSameSite to none on the backend s session init

rp · Answer

But for that you will need to use https for your api layer

ray.npc · Answer

This is my apiDomain http localhost 3001 and websiteDomain http localhost 4200

ray.npc · Answer

thank you for your guidance I will update the config on the backend api layer and turnel it through ngrok to test it

rp · Answer

Cool If you are using ngrok make sure to change the apiDomain value on the backend and frontend to use that domain