1662744 - MSAL cookies seem be missing on incognito mode

Status: RESOLVED INCOMPLETE

(Core :: Networking: Cookies, defect)

Description

[Rahul]

Attachment: ClientLogin.gif

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.135 Safari/537.36

Steps to reproduce:

Open Firefox Incognito mode
Goto our testing site
Enter the client email id
We are redirected into microsoft login page to enter the client's password

Tech Stack:
Angular frontend
MSAL.js library for user authentication
Microsoft AD accounts for authorising the client's credentails

Actual results:

Once the client clicks login we are redirected into the app and gets landed back to the login page.

Now that you are back on the login page, the client enter's his email again and clicks login he does not get redirected into microsoft login but gets logged into the landing page.

On further inspection it seems like MSAL.js depends on some cookies and localStorage to store the JWT token fetched from MSFT after authentication. It cannot store them locally and thus landing it back on the login screen.
This behaviour does not seem to be the case on Firefox normal window, the client gets logged in one the 1st attempt.

Expected results:

We expect to land inside the landing page after authentication on the 1st attempt.

Comment 1

[BugBot [:suhaib / :marco]]

Bugbug thinks this bug should belong to this component, but please revert this change in case of error.

Comment 2

[Dragana Damjanovic [:dragana]]

Baku, how is the right person to look at this now?

Comment 3

[Kershaw Chang [:kershaw]]

Hello, are you still able to reproduce this?
Thanks.

Comment 4

[Kershaw Chang [:kershaw]]

Close because we don't have enough information.