Skip to content

Commit 08f887c

Browse files
authored
chore: add changeset for cross-app authentication callbacks (#7955)
1 parent 5ea4672 commit 08f887c

File tree

1 file changed

+17
-0
lines changed

1 file changed

+17
-0
lines changed

.changeset/pretty-snails-deny.md

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,17 @@
1+
---
2+
"@logto/integration-tests": minor
3+
"@logto/experience": minor
4+
"@logto/core": minor
5+
---
6+
7+
support cross-app authentication callbacks within the same browser session
8+
9+
When multiple applications are initiating authentication requests within the same browser session,
10+
authentication callbacks may interfere with each other due to the shared `_interaction` cookie.
11+
12+
To resolve this, we now change the cookie from a plain UID string to a structured mapping object
13+
`{ [app_id]: interaction_uid }`, and maintain the `app_id` in either the URL search parameters or HTTP
14+
headers for all authentication-related requests and redirects. This ensures that each application can
15+
correctly identify its own authentication context without interference from others.
16+
17+
The fallback mechanism is also implemented to ensure backward compatibility.

0 commit comments

Comments
 (0)