cookies未被发送到浏览器

发布于 2025-01-27 10:51:09 字数 948 浏览 3 评论 0 原文

我有一个由React和Express JS进行的全堆栈项目。目前，两者都是在Heroku中作为两个不同的项目托管的（frontend： x.Herokuapp.com ;后端： y.herokuapp.com ）。

这是问题。每当我尝试登录该应用程序时，都不会在浏览器上设置cookie。浏览器中的cookie存储为空，因此请求失败。错误可能在哪里？

这是设置会话的代码：

app.use(session({
  name: "irmp_session",
  secret: process.env.SESSION_KEY,
  resave: false,
  saveUninitialized: true,
  httpOnly: false,
  maxAge: 7200000, // 2 hrs validity
  store: MongoDBStore,
  cookie: {
    path: "/",
    secure: true,
    sameSite: 'none'
  }
}))

以及执行请求的前端代码：

const URL = 'https://y.herokuapp.com/';

const http = axios.create({
  baseURL: URL,
  headers: {
    "Content-type": "application/json",
    "Access-Control-Allow-Credentials": true
  },
  credentials: 'same-origin'
});

  fetchUserInformation() {
    return http.get("/users/profile", { withCredentials: true });
  }

我阅读的一些文章将我指向了CORS问题，但我不知道该如何真正修复它。任何线索都非常感谢。

原文

I have a full-stack project that I made with React and Express JS. Both are currently hosted in heroku as two different projects (frontend: x.herokuapp.com; backend: y.herokuapp.com).

Here's the problem. Whenever I try to log in to the app, the cookie is not being set on the browser. The cookie storage in the browser is empty, therefore the request fails. Where could the error be?

Here's the code that sets the session:

app.use(session({
  name: "irmp_session",
  secret: process.env.SESSION_KEY,
  resave: false,
  saveUninitialized: true,
  httpOnly: false,
  maxAge: 7200000, // 2 hrs validity
  store: MongoDBStore,
  cookie: {
    path: "/",
    secure: true,
    sameSite: 'none'
  }
}))

And the frontend code that does the request:

const URL = 'https://y.herokuapp.com/';

const http = axios.create({
  baseURL: URL,
  headers: {
    "Content-type": "application/json",
    "Access-Control-Allow-Credentials": true
  },
  credentials: 'same-origin'
});

  fetchUserInformation() {
    return http.get("/users/profile", { withCredentials: true });
  }

Some articles I've read are pointing me to a CORS issue, but I don't know how to fix it really. Any leads are greatly appreciated.

分享到QQ

分享到微博