Back
Cookie rejected because it has the attribute "SameSite=None" but not "Secure"
I have a dev website (dev.domain.com) and appwrite as a subdomain (api.dev.domain.com), but no cookies are saved in the browser when logging in using the web sdk.
The console logs Cookie "a_session_X" was rejected because it has the attribute "SameSite=None" but is missing the attribute "secure".
How do I get it to set the secure cookie?
I have _APP_OPTIONS_FORCE_HTTPS=false in the .env file as Nginx is used in front with its own SSL certificate.
TL;DR
The cookies are not being saved due to the attribute "SameSite=None" without the "Secure" attribute. Add the line `proxy_cookie_path / "/; SameSite=Strict; HTTPOnly; Secure";` to Nginx to set all proxied cookies to secure. This should resolve the issue. Adding this line to Nginx solved the problem:
proxy_cookie_path / "/; SameSite=Strict; HTTPOnly; Secure"; (sets all proxied cookies to secure)
