[Bug]: Client not sending SID cookie to backend with distinct hostnames

[matthewdias]

Bug description

Hi, I just setup the backend and configured it in the frontend, however all requests are being responded to with "Unauthorized" because the cookie is not being sent.

Expectations

Settings changes are saved on backend.

Relevant debug informations

No response

Steps to reproduce

1. Set the backend url in vuetorrent
2. Change one of the vuetorrent settings

How did you install VueTorrent?

Downloaded from GitHub releases

Environment description

Device type and name: Laptop - MacBook Pro
OS: macOS Sonoma

PWA: No
Running inside a container: No

qBittorrent version

4.6.2

VueTorrent version

2.8.0

Agreements

• The bug still occurs on the nightly build
• The bug still occurs on the latest version of qBittorrent
• A similar issue doesn't already exist

[Larsluph]

Are you using two different hostnames for accessing the webui and the backend?

In that case that might cause some trouble with third-party cookies being disabled by default.

[matthewdias]

yes, i am

[Larsluph]

After some digging, the SID cookie set by qBittorrent is created using the HttpOnly which disallows its access in JS environment (e.g. VueTorrent).

Given those restrictions the backend can't be used on distinct hostnames. We need to find a workaround to that.

[Larsluph]

Backend has been updated to allow for bypass.

More info in the wiki

[matthewdias]

This is resolved from my perspective. Thanks for the fix!

[Larsluph]

I'll keep it open as the solution is only a workaround and might cause issues in the future.