3 ms·

Why would users need to enable third party cookies in this scenario?

• oblib 9y ago
  Right now the DB and App file servers use different IPs and domain names and both are set up with SSL and when I turn that off 3rd party cookies in my browser the authentication used on the DB server breaks.
  • twobyfour 9y ago
    Your users are hitting your DB server directly?
    • oblib 9y ago
      Yes. I use PouchDB.js on the client to store data and sync it with the CouchDB server. The CouchDB server also provides the authentication routines for the app.
      • twobyfour 9y ago
        Ok. I'm not very familiar with CouchDB, but with most databases I'vee used, that would be a major antipattern and security risk.
        • oblib 9y ago
          The CouchDB has CORS configured to only accept requests from the app server and it authenticates user requests so it's pretty solid.