SSO 로그인이 작동하지 않는 것 같습니다

david · 1월 23, 2022, 2:54오후

안정(stable) 브랜치의 경우, 수정 사항은 다음과 같습니다:

FIX: Bypass service worker on the SSO path (#15558) (#15560)

committed 12:08AM - 13 Jan 22 UTC

This is a workaround a behavior change in Chromium v97. The following text was …sent to the blink-dev mailing list: > This change broke a SingleSignOn login on the FOSS software Discourse. We have a flow like: > > 1. User visits forum.siteA.com, click login > 2. Gets redirected to idp.siteB.com > 3. Fills login details > 4. Gets redirected to forum.siteA.com/session/sso_login?parameters > 5. Gets redirected to forum.siteA.com/homepage > > On step 4, the response includes a `set-cookie` header, with proper `HttpOnly; SameSite=Lax; Secure `and set. But if there is an active service worker, the login will fail as that cookie will be rejected by Chromium due to SameSite rules now. > > t=2971 [st=258] COOKIE_INCLUSION_STATUS > --> domain = "forum.siteA.com" > --> name = "_t" > --> operation = "store" > --> path = "/" > --> status = "EXCLUDE_SAMESITE_LAX, DO_NOT_WARN" > > The service worker is a vanilla WorkboxJS service worker that intercepts all GETs with the "Network First" strategy. > > Disabling the service worker or using Firefox results in a successful login. There is no warning in either DevTools network tab nor the console that the cookie was rejected. > > Chrome 96: login works > Chrome 97: login does not work > Chrome 98: login does not work > > Is this expected behavior? Even if the request `GET forum.siteA.com` was initiated because of a redirect from a different domain, is it expected that Chrome will silently drop same site cookies from forum.siteA.com? Co-authored-by: Rafael dos Santos Silva <xfalcox@gmail.com>

beta 및 tests-passed 브랜치에도 유사한 커밋이 있습니다.

글		댓글	조회수
Discourse SSO failed to login the user while redirection SSO discourseconnect	0	904	3월 9, 2022
SSO login suddenly broke Bug sso , discourseconnect	9	2319	5월 27, 2015
Login redirect during sso provider login Bug sso , discourseconnect	3	2836	10월 25, 2015
Issues using SSO in custom web app Development	10	1629	1월 9, 2018
SSO (maybe) specific issue SSO	2	2318	9월 4, 2018

SSO 로그인이 작동하지 않는 것 같습니다

Related topics