Currently, I am utilizing an MVC
server with IIS express running on port x.
My client code is executed using an express
server on port y, and requests for data are sent to the server located at localhost:x.
An issue arises as the SessionId cookie is not consistently returned to the server on each request due to CORS limitations. I have learned that the cookie will not be transmitted to a different domain unless it is set to SameSite->none
. However, in order to achieve this status, the cookie must also be marked as Secure
, as advised by this resource:
https://web.dev/samesite-cookies-explained/
If I intend to work with HTTP and require the client to forward cookies to the server, are there any viable alternatives available?