Repository navigation
Direct IPv6 access: password cookie not set in Firefox and Edge #739
Description
code-serverversion: 1.1119-vsc1.33.1- OS Version: Arch Linux Release: 2019.06.01 Kernel: 5.1.5
Description
IPv6 works when accessing by domain with AAAA record. When using IP in form http://[2022:1111:1111:1111:1111:1111:1111:1111]:8080/ - can not login.
Steps to Reproduce
- Start server with
./code-server -h :: -p 8080 -H -P password - Start Firefox 67.0 or Microsoft Edge 18.17763
- Enter address
http://[2022:1111:1111:1111:1111:1111:1111:1111]:8080/- replace with correct IPv6 - Enter password and press Enter IDE
- Cookie with password not set and you will be returned to
/login/page
Possible workarounds
- Use Latest Chrome
- Use domain name with AAAA record
Activity
deansheather commentedon Jun 5, 2019
Tested in Chromium and Firefox. Chromium worked fine, but Firefox wouldn't store the
passwordcookie. Seems like a Firefox bug (and possibly Edge as you mentioned), as the following works in Chrome but not Firefox:You can get this to work in Firefox by omitting the
;domain=[::1]part:We could fix this by omitting the domain part from the cookie in the login script, as the browser should default to the current domain, but I'm not sure if this is safe/encouraged.
code-asher commentedon Nov 5, 2019
Fixed in v2.