Azure / Azure/static-web-apps

Firefox Password Protection breaks page

Open
#1,701 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
346
Forks
67
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**

We have configured Password Protection for the whole static web app. This works in Chrome and Edge, but results in an infinite password enter loop in Firefox.

In the console I notice a warning, that is not shown in either Chrome or Edge.
```Cookie “StaticWebAppsBasicAuthCookie” with the “SameSite” attribute value “Lax” or “Strict” was omitted because of a cross-site redirect.```

Besides this endless password enter loop Firefox reports an issue loading some chunks from the Angular SPA.
I have verified that the files exist in the Static Web App. This also only affects Firefox and no other browser.
As soon as I remove the Password Protection this works without any issues.

Not sure if relevant: the web app is an Angular SPA that itself performs authentication against Azure AD B2C.
After the login all browsers (also Chrome and Edge) ask again for the password, even though it was entered already before the redirect.

**Expected behavior**

No endless password enter loop. The page should be opened as expected.
No errors should be visible in the console. All js chunk files should be downloaded.

**Device info (if applicable):**
- OS: Windows 11
- Browser: Firefox
- Version: 144.0.2

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.