Express session not storing cookies on ios browser, but works fine on andriod except safari

[Tosinkoa]

I have been facing this issue for weeks now, am trying to login to my app on IOS device, it turns out that express-session did not store cookies in the browser, for this reason, I was unable to login. But I was able to login on my android device and laptop. But am still unable to access the app on safari on my android device.

My frontend stack is Nextjs, and Nodejs with express for my backend.
Backend was deployed on heroku and frontend was deployed on netlify

Pls how do I solve this problem. Here is what my code looks like.

============================Server.js=====================================

import express from "express"
import rootRoute from "./src/root_Route.js"
import cookieParser from "cookie-parser"
import passport from "passport"
import connectPgSimple from "connect-pg-simple"
import session from "express-session"
import dotenv from "dotenv"
import cors from "cors"
import "./src/LIB/DB-Client.js"
import "./src/PASSPORT_STRATEGY/google-auth-strategy.js"
import "./src/PASSPORT_STRATEGY/facebook-auth-strategy.js"
import { scheduleJob } from "node-schedule"
import pool from "./src/LIB/DB-Client.js"
dotenv.config()
const app = express()


const connection = process.env.PRODUCTION !== "production" ? process.env.DEV_DATABASE_URL : process.env.DATABASE_URL

app.use(
  cors({
    origin: ["http://localhost:3000", "https://nairaonly-frontend.netlify.app"],
    credentials: true,
    methods: "GET, PUT, POST, DELETE",
    optionsSuccessStatus: 200,
  })
)
const PgStore = connectPgSimple(session)
const store = new PgStore({ conString: connection, schemaName: "hidden", createTableIfMissing: true })

app.use(express.json())
app.use(cookieParser())
app.set("trust proxy", 1)

app.use(
  session({
    store: store,
    secret: process.env.SESSION_SECRET,
    saveUninitialized: false,
    resave: true,
    proxy: true,
    cookie: {
      maxAge: 1000 * 60 * 60 * 24,
      httpOnly: true,
      sameSite: process.env.NODE_ENV === "production" ? 'none' : 'lax',
      secure: process.env.NODE_ENV === "production" ? true : false,
    },
  })
)

app.get("/", (req, res) => {
  res.send("API Running...")
})

app.use(passport.initialize())
app.use(passport.session())
rootRoute(app)

const PORT = process.env.PORT || 4000

app.listen(PORT, (req, res) => console.log(`Server running on PORT:${PORT}...`))

[hmarcelodn-ae]

I can reproduce the same issue with IOS and not with Android. Any clue @Tosinkoa ?

[lucaperullo]

I have the same Issue, cookies are not stored on ios devices

[supersnager]

@Tosinkoa Probably your frontend is loaded from another domain than the backend, so the browser treats the cookie as a third-party cookie.

[Tosinkoa]

@Tosinkoa Probably your frontend is loaded from another domain than the backend, so the browser treats the cookie as a third-party cookie.

Yes you're right
I've solve this a while ago, thanks

[igorSimash]

@Tosinkoa Probably your frontend is loaded from another domain than the backend, so the browser treats the cookie as a third-party cookie.

Yes you're right I've solve this a while ago, thanks

Hello!
How did you solve this?

[SKL-Tooyen]

I have the same Issue
IPhone IOS is some device

app.use(
        session({
          store: new RedisStore({ client: redis, prefix: 'session:' }),
          secret: 'secret',
          saveUninitialized: false,
          resave: false,
          cookie: {
            maxAge: ms('5m'),
            signed: true,
          },
        }),
      );

app.use(
        cors({
          origin: true,
          credentials: true,
        }),
      );

@Tosinkoa
How did you solve this?

[Pr3c10us]

Please how do I solve it

[Tosinkoa]

Your Frontend and Backend needs to point to same DNS. You should get a domain name and setup the DNS

[ndegealbert]

Your Frontend and Backend needs to point to same DNS. You should get a domain name and setup the DNS

@Tosinkoa Any other way to resolve the issue apart from pointing to same DNS

[Tosinkoa]

Your Frontend and Backend needs to point to same DNS. You should get a domain name and setup the DNS

@Tosinkoa Any other way to resolve the issue apart from pointing to same DNS

You should also make sure you configure your cors properly.

[ndegealbert]

Thank works thanks @paul Ojo

…

On Fri, May 3, 2024 at 11:14 PM Paul Ojo ***@***.***> wrote: Your Frontend and Backend needs to point to same DNS. You should get a domain name and setup the DNS @Tosinkoa <https://github.com/Tosinkoa> Any other way to resolve the issue apart from pointing to same DNS You should also make sure you configure your cors properly. — Reply to this email directly, view it on GitHub <#914 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AIMZBHAFHJ4OFEINPAODOODZAPV4HAVCNFSM6AAAAAAQZUGVIKVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAOJTGY4TSOJZHE> . You are receiving this because you commented.Message ID: ***@***.***>

[ndegealbert]

I think the only way to solve issue is only pointing too the DNS hosted my application backend on Render and Node js application on varcel but still not working