Repository navigation
|
Encountering an issue with the Authorization Code Flow on a mobile device using Safari when all cookies are blocked (i.e. both first-party and third-party cookies are disabled). Environment:
Steps to Reproduce:
Observations:
Question:Is it currently impossible to support login flows like Authorization Code Flow on Safari mobile when all cookies are blocked? Goal:I’d like to support login on mobile devices where users have blocked all cookies for privacy reasons. Is it possible to make Keycloak work in such scenarios — or is cookie usage strictly required for this flow? |
Replies: 1 comment
|
Authentication of a user typically needs multiple requests and to identify the same browser is coming an making subsequent requests, cookies are needed. |
Authentication of a user typically needs multiple requests and to identify the same browser is coming an making subsequent requests, cookies are needed.