Skip to content

Firefox Password Protection breaks page #1701

@daviian

Description

@daviian

Describe the bug

We have configured Password Protection for the whole static web app. This works in Chrome and Edge, but results in an infinite password enter loop in Firefox.

In the console I notice a warning, that is not shown in either Chrome or Edge.
Cookie “StaticWebAppsBasicAuthCookie” with the “SameSite” attribute value “Lax” or “Strict” was omitted because of a cross-site redirect.

Besides this endless password enter loop Firefox reports an issue loading some chunks from the Angular SPA.
I have verified that the files exist in the Static Web App. This also only affects Firefox and no other browser.
As soon as I remove the Password Protection this works without any issues.

Not sure if relevant: the web app is an Angular SPA that itself performs authentication against Azure AD B2C.
After the login all browsers (also Chrome and Edge) ask again for the password, even though it was entered already before the redirect.

Expected behavior

No endless password enter loop. The page should be opened as expected.
No errors should be visible in the console. All js chunk files should be downloaded.

Device info (if applicable):

  • OS: Windows 11
  • Browser: Firefox
  • Version: 144.0.2

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions