LogoLogo
APIDemoOfficial SiteDiscord
  • Introduction
  • Want to help?
  • ๐Ÿ’พInstallation
    • Prerequisites
      • Installing Webservers
        • Organizr & Dependency Installer
        • Nginx
        • Apache
        • Caddy
      • Installing PHP
    • Installing Organizr
  • ๐Ÿ“ŒGetting started
  • First Time Setup
  • Tab Management
  • ๐Ÿค–Features
    • Authentication Backend
      • Plex Backend
      • LDAP Backend
    • Server Authentication
      • Nginx Server Authentication
      • Caddy Server Authentication
      • Traefik Server Authentication
    • SSO
      • Plex SSO
      • Tautulli SSO
      • Overseerr SSO
      • Petio SSO
      • Ombi SSO
      • Jellyfin SSO
      • Komga SSO
      • Proxy Auth SSO
        • Grafana SSO
        • NZBHydra2 SSO
        • Calibre SSO
      • Troubleshooting SSO
    • Homepage
      • Sonarr Homepage Item
      • Plex Homepage Item
      • HealthChecks Homepage Item
    • API Socks
    • Backup & Restore
    • Custom Error Pages
    • Fail2Ban Integration
  • ๐ŸงชTweaks
    • Tweaks
    • Hide custom text from specific groups
    • Optimizing PHP-FPM
  • ๐Ÿ†˜Help
    • Custom Work
      • Custom Pages
    • Tutorials
      • Reverse Proxies
    • FAQ
      • Organizr Requirements
      • Forgot my password
      • Organizr Login Error
      • Login Looping - SameSite Errors
      • Auth cookie is not used by other subdomains
      • Update available even though up to date
      • Migration Guide
  • ๐ŸŒ Development
    • Plugin Development
Powered by GitBook
On this page
  • Summary
  • Options

Was this helpful?

Export as PDF
  1. Help
  2. FAQ

Login Looping - SameSite Errors

PreviousOrganizr Login ErrorNextAuth cookie is not used by other subdomains

Last updated 3 years ago

Was this helpful?

Summary

Are you getting stuck in a redirect loop? Are you seeing some console errors in your browser about SameSite Cookies?

Browsers are starting to enforce strict rules on Cookies set by web apps. The issue here is when an application is not hosted on the same host as Organizr. You have three options...

Options

We will use windows as an example.

The Hosts file in Windows is located at the following location:

C:\Windows\System32\drivers\etc

Here you will see the Hosts file. Right-click on it and select Notepad. Make the changes and Save.

But sometimes, even when you are logged on with administrative credentials, you may receive one of the following error message:

Access to C:\Windows\System32\drivers\etc\ hosts was denied

Cannot create the C:\Windows\System32\drivers\etc\hosts file. Make sure that the path and file name are correct.

In this case, type Notepad in Start search and right-click on the Notepad result. Select Run as administrator. Open the Hosts file, make the necessary changes, and then click Save.

The changes you need to make are like below:

127.0.0.1       hostname

The left value is the IP address and the right value is the hostname or text you want to tie to that IP address. For this fix everything needs to be on the same domain (basically like how subdomains work when reverse proxying).

Note: They must be on the same subdomain for this to work. You can't just do:

<service>.tld, they have to be <service>.something.tld

Router/DNS

Depending on your Router you will need to lookup how to achieve this. Routers usually utilize using Dnsmasq.

Use specific webserver to achieve this. Tutorials soon!

This only works if the cookie is not being set with the SameSite property

Chrome

Access this page from your browser chrome://flags

Search for SameSite and disable it.

Note: This was only supposed to be a temporary setting and it seems like Chrome is starting to ignore what this is set to so you'll have to use one of the other options if you try and it doesn't work.

Edge

Access this page from your browser

Search for SameSite and disable it.

FireFox

Search for SameSite and disable it.

Application Errors

Jackett and Tautulli seem to hardcode the SameSite cookie as Lax

Sonarr/Radarr/Lidarr are starting to hardcode the SameSite cookie as Strict

The only way to bypass that is to use Option #1 or Option #2

Access this page from your browser

๐Ÿ†˜
about:config
Read more about SameSite
edge://flags/
Edge settings
Firefox settings