oauth doesn't work in safari

[knotbin]

I thought I had broken something because every time I would log in, it would just redirect me to the logged out page, but I realized it just didn't work in Safari and worked fine in chrome. I assume this is something wrong/incompatible in the storage part of oauth.

[haileyok]

Hey! Quick question, are you using lockdown mode?

[bhbs]

Hello,

It seems that this issue is related to vvo/iron-session#587.

As a possible solution, you can either host your application over HTTPS or set secure: false in your configuration.

I confirmed that by modifying

statusphere-example-app/src/routes.ts

Lines 41 to 44 in 7077651

	const session = await getIronSession<Session>(req, res, {
	cookieName: 'sid',
	password: env.COOKIE_SECRET,
	})

to:

const clientSession = await getIronSession<Session>(req, res, {
  cookieName: "sid",
  password: env.COOKIE_SECRET,
  cookieOptions: { secure: false },
});

it works in Safari.