Payload Auth Login not setting HTTP-only cookie

Luciano

last month

14

• 

  Jarrod

  Payload Team

  last month

  Should be attached to the res, as per this file

  https://github.com/payloadcms/payload/blob/master/src/auth/operations/login.ts
• 

  Luciano

  last month

  Thank you for sending me this file, you are correct the code does show that, however no cookie is being attached to the res on my end!

• 

  Jarrod

  Payload Team

  last month

  do you have auth.cookies.domains configured by chance? (on your auth collection config)

• 

  Luciano

  last month

  Yes,

  auth.cookies.domain: 'localhost:8080'
• 

  Jarrod

  Payload Team

  last month

  and that is you CMS domain?

• 

  Luciano

  last month

  For my development environment, yes.

• 

  Jarrod

  Payload Team

  last month

  curious if the same thing happens when you remove that (I believe it will act the same)

• 

  Luciano

  last month

  You are right, removing

  auth.cookies.domain

  makes it act as before

  
  

  
  

  Is the code at

  https://payloadcms.com/docs/authentication/operations#login

  meant to be implemented on the front end? Because mine is run on the backend

  
  

  
  

  After setting the cookie manually & visiting

  http://localhost:8080/api/accounts/me

  , that works. The Payload Auth Middleware however is not working when checking

  req.user
  

  
  

  @Jarrod just want to confirm that Auth Login is now setting a cookie once I added payload.login

  res: res,

  & removed

  auth.cookies.domain
  

  
  

  Thank you for your help!

• 

  Jarrod

  Payload Team

  last month

  That is great, thank you for following up

• 

  Luciano

  last month

  Also, to anyone who is wondering how to implement the Payload Auth Middleware, follow this code

  https://discord.com/channels/967097582721572934/1070942828009627698/1071720017068036106