title: Oct 01 2020 - 08:42:26 AM
date: 2020-10-01 08:42:26
slug: 01-084226
status: published
display_format: entry
link: https://jj.isgeek.net/2020/10/01-084226/
titleless: True
categories: webdev
categories: http
syndication: https://twitter.com/jjdelc/status/1311587271683067904
mentions: [{"source": "https://brid-gy.appspot.com/like/twitter/jjdelc/1311587271683067904/14234026", "title": "", "url": "https://twitter.com/jjdelc/status/1311587271683067904#favorited-by-14234026", "author": {"name": "Rowan Merewood", "photo": "https://bm.isgeek.net/62/18/bceb27a3faf7f7542947f32da6b6b74ea027aa59985ce3dc60392ead06a8.jpg", "url": "https://twitter.com/rowan_m"}, "is_like": true, "via": "brid-gy.appspot.com"}, {"source": "https://brid-gy.appspot.com/like/twitter/jjdelc/1311587271683067904/11481572", "title": "", "url": "https://twitter.com/jjdelc/status/1311587271683067904#favorited-by-11481572", "author": {"name": "Germ\u00e1n Mart\u00ednez", "photo": "https://bm.isgeek.net/71/63/3f3aabec717c3be4981bbf7ed285a1514fc149208ca52daf221f7718bf53.jpg", "url": "https://twitter.com/germanmartinez"}, "is_like": true, "via": "brid-gy.appspot.com"}, {"source": "https://brid-gy.appspot.com/comment/twitter/jjdelc/1311587271683067904/1312819580650303488", "title": "ahh indeed. I'm just writing on that.\nit's a good thing you went through it since having the `secure` flag is something you should've enabled prior so now you're on a good path.", "url": "https://twitter.com/liran_tal/status/1312819580650303488", "published": "2020-10-04T18:19:13+00:00", "author": {"name": "Liran Tal | \ud83d\udc4b see you at #SnykCon Oct 21-22", "photo": "https://bm.isgeek.net/6b/bb/af0a82bf0be2fb9e7846458594a6f069244597ff922f40cf294578f0d7db.jpg", "url": "https://twitter.com/liran_tal"}, "via": "brid-gy.appspot.com"}, {"source": "https://brid-gy.appspot.com/comment/twitter/jjdelc/1311587271683067904/1312884314258931712", "title": "Totally understand you", "url": "https://twitter.com/liran_tal/status/1312884314258931712", "published": "2020-10-04T22:36:27+00:00", "author": {"name": "Liran Tal | \ud83d\udc4b see you at #SnykCon Oct 21-22", "photo": "https://bm.isgeek.net/6b/bb/af0a82bf0be2fb9e7846458594a6f069244597ff922f40cf294578f0d7db.jpg", "url": "https://twitter.com/liran_tal"}, "via": "brid-gy.appspot.com"}, {"source": "https://brid-gy.appspot.com/comment/twitter/jjdelc/1311587271683067904/1312880689239461888", "title": "I could only \"figure it out\" because I had previously read Mozilla's post to think it could be that. There were 0 hints anywhere of how to debug this. Without prior outside knowledge it's impossible to deduce.", "url": "https://twitter.com/jjdelc/status/1312880689239461888", "published": "2020-10-04T22:22:03+00:00", "author": {"name": "Jj", "photo": "https://bm.isgeek.net/02/b3/ba0cd3e89086114bfb3faecb67df9eeb3cdafcaeb74d4a3e96ae5307e220.jpg", "url": "https://twitter.com/jjdelc"}, "via": "brid-gy.appspot.com"}]


In order to make an iframe's request send the domain's cookies. I had to set my cookies to `SameSite=none` and make sure that my cookies are `Secure`. Spent the last 2hrs learning that #webdev #http 

Glad I had read Mozilla's announcement last month, so I could guess it may be something related to this when my site stopped working.

https://hacks.mozilla.org/2020/08/changes-to-samesite-cookie-behavior/