[Webkit-unassigned] [Bug 219872] New: All our cookies get randomly deleted from the NSHTTPCookieStorage. Could be a cookie sync issue between NSHTTPCookieStorage and WKHTTPCookieStore.

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=219872

            Bug ID: 219872
           Summary: All our cookies get randomly deleted from the
                    NSHTTPCookieStorage. Could be a cookie sync issue
                    between NSHTTPCookieStorage and WKHTTPCookieStore.
           Product: WebKit
           Version: WebKit Nightly Build
          Hardware: iPhone / iPad
                OS: iOS 14
            Status: NEW
          Severity: Blocker
          Priority: P2
         Component: New Bugs
          Assignee: webkit-unassigned at lists.webkit.org
          Reporter: exu at linkedin.com

Summary:
All our cookies get randomly deleted from the NSHTTPCookieStorage.
We suspect an issue in the cookie sync between NSHTTPCookieStorage and WKHTTPCookieStore on our iOS app. 

Our investigation: 
- This issue happens on more predominantly on iOS 14

- We’ve confirmed that the server is not deleting/resetting cookies, and the cookies are issued by server with attributes Same-Site:None and Secure:Yes.

Our observations:
When app users tap for in-app browser with WKWebView, a call from WKWebView to the server is made (either directly or via XMLHttpRequest).  And right after the network call, cookies in NSHTTPCookieStorage are deleted. We suspect there is some bug in the sync between WKHTTPCookieStorage & NSHTTPCookieStorage leading to deletion of cookies from NSHTTPCookieStorage.
First call after cold launch either in the app or extension/widget doesn’t contain certain cookies but those cookies magically appear after a few milliseconds and subsequent network calls do contain these cookies.

Question:
- When the cookies are getting deleted from WKWebView, the cookies from the NSHTTPCookieStorage are also deleted. Is this expected?

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.webkit.org/pipermail/webkit-unassigned/attachments/20201214/a140b171/attachment-0001.htm>