ory / ory/elements

Support post-form submit option to prevent "intelligent" 3P cookie limits on Safari

Open
#369 1 comment 0 reactions 1 assignee View on GitHub

@jonas-jonas is already working on this.

Since Apr 23, 2025.

bug
Dominant language
TypeScript
Stars
187
Forks
80
PR merge metrics
No merged PRs in 30d

Description

Preflight checklist
Ory Network Project

No response

Describe the bug

Doing AJAX submits with cookie setting is triggering Safari's intelligent 3P cookie detection due to the use of CNAME / CNAME "cloaking".

Reproducing the bug

Submit a login flow using a custom domain in Ory Network.

Relevant log output

Relevant configuration

Version

master

On which operating system are you observing this issue?

None

In which environment are you deploying?

None

Additional Context

Ideally, we would keep AJAX submit and solve this in kratos so that users don't have to sign in again after 7 days. If that is not possible, we should offer an feature flag in Ory Elements to do the form submit using traditional HTML submit, as that doesn't trigger 3P cookie detection as it's considered 1P. That's the way it currently works in the current ory elements.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.