Skip to main content

Safari session cookie do not work with API server.

I have problem with session on Safari.
My server is Apache Laravel on a dedicated AWS.
Admin is angularJS on an Windows XAMPP server.
My problem occur on UAT Testing site (like staging)
Live server do not have problem.

The cause is so simple but it take me about 2-3 day to figure of what the heck with Safari. It caused by domain admin web and API do not match. So the fix is so simple and in the real app it rarely apear because normaly api and web app use same domain name abc.com. But on testing, sometime we have to work with IP or not real domain name. This post I note something that I've learned when debug Why Safari could not write session (or more exactly, Why session cookie do not work on safari with api server)


Cookie domain:
admin.abcxyz.test.co
api.123.vps.com

=> Default chrome work well (like allow all cookie).

But default Safari only Allow from websites I visite.


After some trial and digging, I end up with figure out the different behavior of Safari with chrome. Safari both 9 and 10 not work.



I eventually use curl to test cookie:



Another problems are: my staging server using a special docker container that it hard and take time to debug and manage code version , and second is that some time Safari 10 on Mac Mini can work well with session but other (Macbook  or iPhone not). After quit Safari - MacMini it can not work again.
I will update why this happen and figure better way to handle this special container.

Comments

Popular posts from this blog

Rand mm 10

https://stackoverflow.com/questions/2447791/define-vs-const Oh const vs define, many time I got unexpected interview question. As this one, I do not know much or try to study this. My work flow, and I believe of many programmer is that search topic only when we have task or job to tackle. We ignore many 'basic', 'fundamental' documents, RTFM is boring. So I think it is a trade off between the two way of study language. And I think there are a bridge or balanced way to extract both advantage of two method. There are some huge issue with programmer like me that prevent we master some technique that take only little time if doing properly. For example, some Red Hat certificate program, lesson, course that I have learned during Collage gave our exceptional useful when it cover almost all topic while working with Linux. I remember it called something like RHEL (RedHat Enterprise Linux) Certificate... I think there are many tons of documents, guide n books about Linux bu

Martin Fowler - Software Architecture - Making Architecture matter

  https://martinfowler.com/architecture/ One can appreciate the point of this presentation when one's sense of code smell is trained, functional and utilized. Those controlling the budget as well as developer leads should understand the design stamina hypothesis, so that the appropriate focus and priority is given to internal quality - otherwise pay a high price soon. Andrew Farrell 8 months ago I love that he was able to give an important lesson on the “How?” of software architecture at the very end: delegate decisions to those with the time to focus on them. Very nice and straight-forward talk about the value of software architecture For me, architecture is the distribution of complexity in a system. And also, how subsystems communicate with each other. A battle between craftmanship and the economics and economics always win... https://hackernoon.com/applying-clean-architecture-on-web-application-with-modular-pattern-7b11f1b89011 1. Independent of Frameworks 2. Testable 3. Indepe