Farooq

@shamszzazzo There a few reasons: * Are the frontend and backend on different domain names/IP? * Have you set up the CORS headers correctly? You need "SameSite" as "None". Also,...

I think Oscar API is supposed to work best when your frontend is already inside Django (or share the same domain). If you have a separate frontend on a different...

If you want to stick to Session Authentication still then I guess something like this could work: ``` CSRF_COOKIE_SECURE = True SESSION_COOKIE_SECURE = True CSRF_COOKIE_SAMESITE = 'None' SESSION_COOKIE_SAMESITE = 'None'...

@jonathan-s The djangocms method only works with `get()`. It doesn't work with `filter()`.