Base solution for your next web application
Open Closed

Microsoft Security Advisory: iOS12 breaks social, WSFed and OIDC logins #6139


User avatar
0
ashgadala created

Hi support,

When I login into app on desktop browswers there is no problem with the adfs. But, When i login using the mobile client -IPhone or IPad browsers, login fails with no log and just returns to login screen even though the session is valid. fyi.I was able to validate the cookie with the other app.

Can you please help.

Thank you Avi


7 Answer(s)
  • User Avatar
    0
    ashgadala created

    from the log: this is the only information i have. Could not get information from external login.

    and could be similar to https://support.aspnetzero.com/QA/Questions/4033 Can you please let me know if you see this error.

  • User Avatar
    0
    ashgadala created

    Found this,@aspnetzero team. Can you look into this? https://github.com/IdentityServer/IdentityServer4/issues/2595

  • User Avatar
    0
    ashgadala created

    https://github.com/aspnet/Announcements/issues/318

  • User Avatar
    0
    ismcagdas created
    Support Team

    @ashgadala

    I think we need to wait for https://github.com/aspnet/Announcements/issues/318

  • User Avatar
    0
    ashgadala created

    @ismcagdas

    Do you recommend adding this to authConfigurerer?

    services.ConfigureExternalCookie(options => { // Other options options.Cookie.SameSite = SameSiteMode.None; }); services.ConfigureApplicationCookie(options => { // Other options options.Cookie.SameSite = SameSiteMode.None; });

  • User Avatar
    0
    ashgadala created

    OOk,

    Adding the above code solved the problem for me but I think this might have introduced additional security problems.

  • User Avatar
    0
    ismcagdas created
    Support Team

    @ashgadala, we will work on this issue as well. Thank you for sharing the solution with us.