The solution after the samesite by default cookies of Chrome browser 91 version are removed, and the solution that cross domain post requests in chrome cannot carry cookies

 

On Monday morning, when I turn on my computer to prepare for the development project , Suddenly found that the website login jump is abnormal , Why can't I log in? I always jump back to the login page . After eliminating the reason of the back end through packet capturing , Find the backend set-cookie There is no effect , All of a sudden Chrome Disable third parties Cookies The plan for , open Edge The update record of has been automatically updated to Chromium 91 了 .

Because the development environment needs , We put the browser's same-site-by-default-cookies and cookies-without-same-site-must-be-secure Both flag It's banned in the . But update to 91 After version , Chromium Directly turn off the option and set it to on by default , Then there is no way in flag Set up inside. .

Solution

1.

lower than 91 Version of Chrome browser ：

Chrome Medium access address chrome://flags/ Search for samesite take same-site-by-default-cookies, and SameSite by default cookies These two Set to Disabled Restart the project after the browser . By default, this setting will not specify SameSite Property request SameSite=Lax To deal with it .

2.  window,91 Version and above Chrome browser ：（ programme 1 The settings in 91 Version has been Chorme remove ）

Windows： open Chrome Properties of shortcut , stay    The goal is   Add  

--disable-features=SameSiteByDefaultCookies

Or add

--flag-switches-begin --disable-features=SameSiteByDefaultCookies,CookiesWithoutSameSiteMustBeSecure --flag-switches-end

, Click ok ,（ Be careful ！！！ Be sure to close all browsers , Be sure to add a few spaces after the goal ） Then restart the browser .

Mac：Mac The system can solve this problem by opening the browser with parameters on the command line , You must close all browser windows and sign out Operate after browser .

• Turn on Chrome command ：

  open -a "Google Chrome" --args --disable-features=SameSiteByDefaultCookies

• Turn on Chromium edition Edge Browser commands ：

  open -a "Microsoft Edge" --args --disable-features=SameSiteByDefaultCookies

  3. 94 And above Chrome browser

Chromium Project website Mentioned in 94 Version disable settings via the command line SameSite The default method will be removed , Arrival plan 1 And solution 2 Will not be able to use , It can be passed later nginx And other agent tools or software turn cross domain requests into non cross domain requests to solve the problem . If you want to work in the development environment in the future , Honestly https Maybe the simplest way .

thank ! https://juejin.cn/post/6967695146322247716  And  https://gadzan.com/chrome-edge-91hou