Skip to content

CookieStore SameSite warning in Firefox #2735

@eelke

Description

@eelke

I have a project, using ember-simple-auth 6.0.0, and ember 5.3.

My application session store is very basic:

import CookieStore from 'ember-simple-auth/session-stores/cookie';

export default class ApplicationSessionStore extends CookieStore {
  sameSite = 'Strict';
}

This seems to work fine, however (only) in Firefox I see the following warning:

Cookie “ember_simple_auth-session-expiration_time” does not have a proper “SameSite” attribute value. Soon, cookies without the “SameSite” attribute or with an invalid value will be treated as “Lax”. This means that the cookie will no longer be sent in third-party contexts. If your application depends on this cookie being available in such contexts, please add the “SameSite=None“ attribute to it. To know more about the “SameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Headers/Set-Cookie/SameSite chunk.vendors-node_modules_formatjs_intl_lib_index_js-node_modules_clipboard_dist_clipboard_js-node-736ba6.7f8bb27ee02b0ae8b916.js line 358 > eval:16:3765

And the weird thing here is: the ember_simple_auth-session-expiration_time cookie has not even been set yet at this point.
Only ember_simple_auth-session-session exists and is working fine.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions