Authentication in Safari returns status code 302

[m4tice]

Despite successful authentication, user keeps redirected back to login page with status code 302 on private home page.

This happens only in Safari as it is working fine in Chrome.

[m4tice]

No activity.

[m4tice]

The issue was with Flask session cookie configuration, not the client-side JavaScript. Here's what was fixed:

Main Issues:

1. SESSION_COOKIE_SECURE = True - This requires HTTPS, but you're running on HTTP localhost
2. SESSION_COOKIE_SAMESITE = 'Strict' - Safari enforces this more strictly than Chrome

Changes Made:

1. Fixed session settings in settings.py:

• Changed SESSION_COOKIE_SECURE to False for development
• Changed SESSION_COOKIE_SAMESITE from 'Strict' to 'Lax'

2. Cleaned up client-side code in both signin.js and registration.js:

• Removed unnecessary client-side cookie setting
• The app uses server-side Flask sessions, not client-side cookies for authentication

Why Safari was failing:

• Safari strictly enforces cookie security policies
• The used secure cookie settings were incompatible with HTTP localhost
• The SameSite=Strict setting was too restrictive for Safari's cross-origin handling

Reference: m4tice/wortschatz@de22547