authentication cookie missing for <1% of firefox users
On our online application we are facing with some strange behavior for a small percentage of our firefox users (<1%).
When doing oauth2 authorization, after generation of the authentication token we redirect to another platform but we are detecting that for a small percentage of Firefox the cookie (my_auth_cookie) with the auth token is not present.
GET: https://www.mywebsite.com/application/login Response:
new location https://www.mywebsite.com/otherapplication/redirect
set-cookie: my_auth_cookie expires=Mon, 04 Dec 2023 13:49:15 GMT; domain=.mywebsite.com; path=/; secure; samesite=lax; httponly
2. GET https://www.mywebsite.com/otherapplication/redirect
Set-cookie: mycookie: value
Host: www.mywebsite.com
In cookie tab I see my_auth_cookie (value: xxxx, domain: .mywebsite.com, expires: Mon, 04 Dec 2023 13:49:15 GMT, httponly: checked, secure: checked,SameSite: Lax, partitionkey: empty, Priority: medium
I’ve tried to replicate but without success (with multiple extensions, including multi-account containers), with multiple configurations of Total Cookie Protection.
Again, this only seems to be happening to a very limited number of firefox users but for these, it happens 100% of the time. We see it occurring for versions 119 and 120 but now and then for older versions.
Feedback reports no extensions&addons.
Any ideas on what we could be dealing with? Any help would be greatly appreciated.
Усі відповіді (3)
Could be a problem with Total Cookie Protection.
Hi, thank you for your reply. We tried multiple configurations of total cookie protection and could not replicate. Feedback from clients is that no specific configurations were used - so we are assuming default values.
Defaults can vary due to rollouts, you can see active ones by visiting about:studies.