Has anyone experienced session cannot be refreshed...
# support-questions-legacyr
ray.npc
01/27/2023, 9:40 AMHas anyone experienced session cannot be refreshed on electronjs? In the network tab, refresh call (http://localhost:3001/auth/session/refresh) return 401 unauthorised
r
rp_st
01/27/2023, 9:46 AMhey!
rp_st
01/27/2023, 9:46 AMcan you enable backend debug logs and show the output?
r
ray.npc
01/27/2023, 2:09 PMSure, this is debug logs output.
ray.npc
01/27/2023, 2:09 PMray.npc
01/28/2023, 2:49 AMFrom the logs, idRefreshToken should be set after signin right but it is not found when the session is trying to refresh. During the development, running in localhost:4200 is working fine and session is working normally. Also, I have implemented windowHandler and cookieHandler based on the electron example. Any suggestion can I go to solve this? @rp_st
r
rp_st
01/28/2023, 4:59 AMHmmmm. So the issue is only during prod
rp_st
01/28/2023, 5:00 AMCan I see the sign in request and response headers in prod?
r
ray.npc
01/28/2023, 7:01 AMYeah, The issue happen in production code. when the code is compile into electron app. @rp_st
ray.npc
01/28/2023, 7:01 AMthe screenshot below is the signin request
ray.npc
01/28/2023, 7:02 AMray.npc
01/28/2023, 7:04 AMBelow, this is the screenshot for refresh request with both request and response headers.
ray.npc
01/28/2023, 7:05 AMr
rp_st
01/28/2023, 7:11 AMcan you hover on the orange triangle in the set-cookie response header? What does it say?
r
ray.npc
01/28/2023, 7:17 AMThe orange triangle said, 'This attempt to set a cookie via a Set-Cookie header was blocked because it has the "SameSite=Lax" attribute but came from a cross-site response which was not the response to a top-level navigation'
r
rp_st
01/28/2023, 7:28 AMRight. Whats the value of APIDomain and websiteDomain on the backend?
rp_st
01/28/2023, 7:35 AMThe issue is that you need to set cookieSameSite to “none” on the backend’s session.init
rp_st
01/28/2023, 7:35 AMBut for that, you will need to use https for your api layer
r
ray.npc
01/28/2023, 7:36 AMThis is my apiDomain: http://localhost:3001 and websiteDomain:http://localhost:4200
ray.npc
01/28/2023, 7:39 AMthank you for your guidance. I will update the config on the backend api layer and turnel it through ngrok to test it.
r
rp_st
01/28/2023, 7:40 AMCool. If you are using ngrok, make sure to change the apiDomain value on the backend and frontend to use that domain
2 Views