K7
> The CSRF cookie is used to store the state before calling authentication server > > ``` > tenant.auth0.com/authorize?...&state=xyzABC123 > ``` > > when authentication server callbacks oauth2 proxy, then...
> > > > The CSRF cookie is used to store the state before calling authentication server > > > ``` > > > tenant.auth0.com/authorize?...&state=xyzABC123 > > > ``` >...
> Seek problem is usually caused by lack of `keyframes` table in `onMetaData` structure. > > If `duration` field has been existed in the metadata of flv file, it will...
> BTW, My system setup is in the following: > > x86 pc with ubuntu 18.04 > SDR: bladeRF 2.0 micro > UE: Samsung galaxy J7 > SIM: Chinese blank...
> I am using xA4. I don't have bladeRF version 1.0 so I could not test it. OK, Thanks
After reading some article about how to use state parameter in Oauth2, I'm agree that we should use cookie to validate it. [A blog](https://fusebit.io/blog/oauth-state-parameters-nodejs/#:~:text=Regular%20web%20app,Cookie%20or%20session) [Auth0 official description](https://auth0.com/docs/secure/attack-protection/state-parameters#set-and-compare-state-parameter-values:~:text=You%20store%20something%20on%20the%20client%20application%20side%20(in%20cookies%2C%20session%2C%20or%20localstorage)%20that%20allows%20you%20to%20perform%20the%20validation.) And also I...
> What oauth2-proxy version are you using? Could you try with the latest version and enable the parameter described bellow, to check if you are really facing the issue that...
the csrf cookie will not exist at callback. in developer tools you can see the cookie is refused to include in request due to the redirect chain not meet the...
> I've created this [PR](https://github.com/oauth2-proxy/oauth2-proxy/pull/1947). The PR allows you to define the samesite for the CSRF cookie with the option --cookie-csrf-samesite. Set --cookie-csrf-samesite equal to one of the values you...
> I'm quite confused by your explanation, do not take me wrong. If you set to none the samesite of CSRF cookie, and to strict the samesite of session cookie,...