Next-i18next: Firefox warning next-i18next cookie not secure

Created on 23 Apr 2020 · 9Comments · Source: isaachinman/next-i18next

I'm getting this warning in Firefox 76 with next-i18next 4.3.0:

Cookie “next-i18next” will be soon rejected because it has the “sameSite” attribute set to “none” or an invalid value, without the “secure” attribute. To know more about the “sameSite“ attribute, read https://developer.mozilla.org/docs/Web/HTTP/Cookies

Source

win7ers

All 9 comments

Read the docs.

  // optional expire and domain for set cookie
  cookieExpirationDate: new Date(),
  cookieDomain: 'myDomain',
  cookieSecure: true // if need secure cookie

isaachinman on 23 Apr 2020

👀3

It looks like SameSite cannot be easily overridden: https://github.com/i18next/i18next-http-middleware/blob/5a2ee9a8188ce5d108ce3ee158054cf5ecb47d45/lib/languageLookups/cookie.js#L78-L83

I guess cookieDomain is the way to go for now.

Sidenote: because the config options are not merged, you'll need to re-add all the default options from next-i18next in your config:

new NextI18next({
  // ...
  detection: {
    lookupCookie: 'next-i18next',
    order: ['cookie', 'header', 'querystring'],
    caches: ['cookie'],
    cookieDomain: 'yourwebsite.com',
  },
})

martpie on 22 May 2020

I am not able to make this work, the SameSite remains none.

I'm using version 4.5.0

Here's my initisalisation code:

const nextI18Next = new NextI18Next({
    defaultLanguage: 'en',
     otherLanguages: [],
    localePath: 'src/public/static/locales',
    localeSubpaths: {
        en: 'en',
    },
    serverLanguageDetection: false,
    // debug: true
    detection: {
        lookupCookie: 'lang',
        caches: ['cookie'],
        cookieExpirationDate: new Date().setMonth(new Date().getMonth()+2),
        cookieSameSite: 'strict',
    },


});