apache / apache/couchdb

Same site error Safari et iOS

Open
#3,907 0 comments 0 reactions 0 assignees View on GitHub
bug needs-triage
Dominant language
Erlang
Stars
7k
Forks
1.1k
Avg merge
1d 16h
Merged PRs (30d)
9

Description

Hello,

I installed CouchDB 3.2.1 on Ubuntu 20.04.
I enabled SSL on port 6984 with a well-recognized Let's Encrypt SSL certificate in my browsers and with a domain name that I manage.

I have a problem that has already been reported, authentication in VueJS webservice on Safari, iOS and Chrome with the returned cookie.

I tested authentication with pouchDB authentication and with Axios it doesn't work on Safari, iOS and Chrome. It works perfectly on Firefox.

I saw that it was necessary to add the line "same_site=None".
This partially fixes the issue on Chrome, but not on Safari and iOS.

On Safari and iOS I tried to deactivate the "prevent cross-site tracking" option in the preferences, the authentication passes but the session closes just as soon.

I don't know if it's my setup or something else.

Can installing an authentication proxy solve my problem?

Thank you for your help

Best regard

Contributor guide

Open the contributing guide

Research direction

The report concerns CouchDB 3.2.1 authentication cookies with PouchDB or Axios from VueJS on Safari, iOS, and Chrome, using HTTPS and the same_site=None setting. Start by reproducing the session behavior with the described browser and certificate setup. Done means determining whether the behavior is caused by CouchDB configuration or browser cookie policies and documenting a confirmed resolution.

Written by the indexing model from the issue text.

Assessment

Tech stack
erlang, ios, javascript, ubuntu
Domain
api, authentication, backend, database
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.