4

I am working locally on a project where my Laravel backend is running by Laravel Valet on the url https://backend.app and my frontend is a Vue project running on http://localhost:8080.

When I do the call from my frontend to my backend to generate the CSRF token I get a 200 response but I get a warning next to the Set-Cookie header that says:

This Set-Cookie was blocked because it has the "SameSite=Lax" attribute but came from a cross-site response which was not the response to a top-level navigation.

I can imagine that it can't work when my backend runs on backend.app and my frontend runs on localhost. Any tips or ideas how to get this to work on my local environment?

Bart Bergmans
  • 4,061
  • 3
  • 28
  • 56

0 Answers0