-
Notifications
You must be signed in to change notification settings - Fork 60
Description
Describe the bug
We have configured Password Protection for the whole static web app. This works in Chrome and Edge, but results in an infinite password enter loop in Firefox.
In the console I notice a warning, that is not shown in either Chrome or Edge.
Cookie “StaticWebAppsBasicAuthCookie” with the “SameSite” attribute value “Lax” or “Strict” was omitted because of a cross-site redirect.
Besides this endless password enter loop Firefox reports an issue loading some chunks from the Angular SPA.
I have verified that the files exist in the Static Web App. This also only affects Firefox and no other browser.
As soon as I remove the Password Protection this works without any issues.
Not sure if relevant: the web app is an Angular SPA that itself performs authentication against Azure AD B2C.
After the login all browsers (also Chrome and Edge) ask again for the password, even though it was entered already before the redirect.
Expected behavior
No endless password enter loop. The page should be opened as expected.
No errors should be visible in the console. All js chunk files should be downloaded.
Device info (if applicable):
- OS: Windows 11
- Browser: Firefox
- Version: 144.0.2