Learn about CSRF

I don't see how using a "challenge token" adds any kind of prevention: what value should be compared to what? From OWASP: Generally speaking, developers only need to generate this token once for the current session. After initial generation of this token, its value is stored in the session...

P粉056618053 2023-10-23 13:57:29 0 2 218

Taking action within actions: Leverage nested actions to make a difference in your next Redux

I want to implement the logic of authorizing users when the page loads. Initially I wanted to check if there is a token in the cookie (checkUserToken) and if there is or not - call another function (fetchUserData) which will make a future request to the server. Finally, when the server responds - ca...

P粉614840363 2023-09-17 08:40:23 0 1 176

Adding cookie header causes request to hang

I'm working on a class project where we need to write a website using php. We were told that we should write separate pages to query information and the php session for saving variables. I have successfully started a session, but when I try to make a request and add headers for the session, the requ...

P粉897881626 2023-09-15 21:20:14 0 1 287

Nodejs: Correct way to return non-HTML data to browser?

User JWT is sent to the browser as an HTTP-only cookie. My question is, what is the best way to communicate the display name and user database ID, etc. to the browser? I know that information can and does be set in the JWT payload, but isn't it best practice to make that cookie (JWT) unavailable to ...

P粉642436282 2023-09-15 16:04:49 0 1 736

Cookies lost after WordPress redirect

Anyway, I build a form and call a function in the plugin to set the cookie when the form is submitted and redirected to the page. Through testing, I can see that the cookie is indeed set when the form is submitted, but when the redirect occurs, I lose the cookie and the value associated with it. I'v...

P粉198814372 2023-09-09 23:47:44 0 1 331

Is there a way to pass data from one subdomain to another, opening two different tabs in react

I have the first subdomain, for example. a.xyz.com and try to pass the data to a second subdomain, eg. b.xyz.com is located under e.g. domain. xyz.com.. I've tried using local storage, session storage, and cookies but can't get through. Is there a way to pass data from first subdomain to second subd...

P粉143640496 2023-09-08 10:26:30 0 1 318

How to add user access level in PHP login function

I have developed a PHP login/registration script that when a user logs in, it starts a session and creates a cookie, then redirects the user to the dashboard using the following command.php://getdatainvariables$emailAddress=mysqli_real_escape_string($conn, $_POST['emailAddress']);$password=mysqli_re...

P粉680000555 2023-09-05 20:51:43 0 1 182

How to keep a user session active even after closing the browser or returning after being idle in PHP for a while?

In my code I can select "Remember me", when selected it saves the value of email and password in cookie and the cookie lasts for 1 month, now when the user comes to the page again, the session it is not persisted active state, instead get the value from the saved cookie and display it on t...

P粉826429907 2023-09-03 08:53:53 0 1 176

CodeIgniter 3 session lost when regenerating session ID using Memcached driver only

I'm developing a long running project using the CodeIgniter3 framework. For several months we have been experiencing issues with sessions being randomly lost. I have updated the framework files to the latest version (3.1.13). It looks like this fixed the issue on the development server, but in produ...

P粉356361722 2023-08-31 17:14:45 0 2 228

How to use CORS to allow cookies to be set

I've looked at other related posts but none of them worked for me. I use vue on the client side and node on the server side. I tried the approach suggested in other posts using the cors library without success. One might think that the following code would allow me to send requests from the client's...

P粉765684602 2023-08-29 17:26:51 0 2 181

Problem that session cookies cannot be saved after application deployment

I created a front-end application using React and then deployed it on Netlify. The frontend application interacts with an express backend application that I created and deployed to Render. Any interaction between frontend and backend is protected by authentication using passportjs. The backend appli...

P粉312631645 2023-08-29 09:37:44 0 1 207

Where to add `SameSite=None`?

I have the following code appearing on my website and I can't figure it out despite my best efforts, so I have a few questions, please read on. category-search-Forum:1The cookie associated with the cross-site resource at https://www.google.com/ was set without the "SameSite" attribute. It'...

P粉652523980 2023-08-27 21:20:48 0 2 313

Unable to use Laravel Sanctum on frontend to generate CSRF cookie

Recently I tried using LaravelSanctum for authentication in Nuxt3 but ran into issues during the initial CSRF cookie handshake. The problem is that after I make a request to the http://localhost:8000/sanctum/csrf-cookie path, the XSRF-TOKEN cookie is not set by the browser. I've been stuck on this p...

P粉099985373 2023-08-26 19:05:10 0 1 241

Does port affect HTTP cookie usage?

I have two HTTP services running on one machine. I just want to know if they share their cookies or if the browser differentiates between these two server sockets.

P粉917406009 2023-08-21 21:59:41 0 2 211

JavaScript Tutorial: Using JavaScript to create and read values in cookies

How to create and read the value of a cookie in JavaScript?

P粉752290033 2023-08-21 17:43:22 0 2 308

Use Fetch API to pass cookies

I'm trying to use the new FetchAPI but I'm having trouble handling cookies. Specifically, after a successful login, there is a Cookie header in future requests, but Fetch seems to ignore this header and all requests I make using Fetch are unauthorized. Is this because Fetch is not ready yet, or does...

P粉066725148 2023-08-21 17:18:31 0 2 326

In the Puppeteer browser, unexpected closing behavior after clicking the Cookie Accept button

I'm trying to use node.js and puppeteer to crawl a website for live football information, but after console.log("tryingtoselectteamelement") my browser closes immediately. constpuppeteer=require("puppeteer");asyncfunctionopenPage(){constbrowser=awaitpuppet

P粉883278265 2023-08-16 21:40:51 0 1 195

Chrome doesn't delete session cookies

I'm trying to set a session cookie in javascript, like this: document.cookie='name=alex;path=/' but even if I quit the browser and start it again, Chrome won't delete it. I checked in Firefox and Opera and both work as expected - they delete the session cookie when the browser exits. Is Chrome just ...

P粉546179835 2023-08-16 20:26:24 0 2 313

Express backend has issues receiving subdomain cookies using CORS and Cookie-Parser

I'm currently developing a MERN (MongoDB, Express, React, Node.js) application and I'm having issues receiving cookies from subdomains in the Express backend. I have CORS and cookie handling set up and everything works fine when using a simple localhost origin, but am having trouble handling subdoma...

P粉665427988 2023-08-14 21:31:57 0 1 205

Transfer cookies to subdomains located on different servers, implemented using PHP

How to pass cookies when subdomain is on different server? Basically, the main domain is siteground and the subdomain is softr.io. I'm using this for authentication, so when someone logs into the main domain, he/she can also access the login session on the subdomain. softr.io has

P粉046878197 2023-07-31 13:04:34 0 1 281