How to resolve the “Cookie Without SameSite Attribute” on Azure Front Door

Joao Gabriel De Oliveira 1 Reputation point
2022-01-07T14:15:40.993+00:00

Hi

I have enabled the Session Affinity on Azure Front door but when I navigate the website on Chrome it shows me the following error:

"This Set-Cookie header didn't specify a 'SameSite' attribute and was defaulted to 'SameSite=Lax', and was blocked because it came from a cross-site response which was not the response to a top-level navigation. The Set-Cookie had to have been set with 'SameSite=None' to enable cross-site usage."

How can I configure this attribute on Azure Front Door?

Thanks

Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
581 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ChaitanyaNaykodi-MSFT 23,031 Reputation points Microsoft Employee
    2022-01-09T18:07:21.25+00:00

    Hello @Joao Gabriel De Oliveira , thank you for reaching out. When you enable Session Affinity on Azure Front door, two cookies are added ASLBSACORS and ASLBSA respectively. If the traffic is going over HTTPS, ASLBSACORS should contain SameSite attribute with its value as None. Can you please validate the values of these cookies? It will also be helpful if you could provide more information on the backend setup. Thank you!

    0 comments