Mobile Apps: Identity Session/Cookie Not Maintained

Mobile Apps Bugs
62

Done those changes and still no luck.

My flow is as follows.

  1. Login successfull. Upon success form login, browser go to assistant.html page
  2. My server action on the assistant.html page that I am running returns the following in safari developer tools:

Request Cookies
No request cookies.

Response Cookies
No response cookies.

5
38
307.2 KB
96.8 KB
1
Summary
URL: https://appxxxxx.com.au/api/Rapid/getAllMyDeals
Status: 401
Source: Network
Address: xxxx
Initiator:
fetch.js:338

Request
:method: GET
:scheme: https
:authority: app.xxx.com.au
:path: /api/Rapid/getAllMyDeals
Accept: application/json
Accept-Encoding: gzip, deflate, br
Accept-Language: en-US,en;q=0.9
Connection: keep-alive
Host: app.xxxx.com.au
If-None-Match: W/"c-dAuDFQrdjS3hezqxDTNgW7AOlYk"
Origin: capacitor://localhost
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148

Response
:status: 401
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: capacitor://localhost
Content-Length: 12
Content-Type: text/plain; charset=utf-8
Date: Wed, 13 Aug 2025 01:51:04 GMT
ETag: W/"c-dAuDFQrdjS3hezqxDTNgW7AOlYk"
Vary: Origin, Accept-Encoding

Also looking at my login servre action it also has empty cookies.

63

Are you sure credentials true is on the login API form?

What do you see on login request? It has a cookie tab, any warning there?

64

yes true is on and no warnings.

65

I'm facing the same issue. Login shows successful but, cookies not set. Previously I created an android app using Wappler6.x when I reopened that project is Wappler 7.1.2 and updated project with beta extensions, That project got the same issue (i.e. Login successful but cookies not set)

66

No one seems to be responding .. this is a bit ridiculous. The team worked incredibly hard to put in shiny features like AI but basic core problems like this still exist which can prevent users from building out their apps. Very frustrating I just wish they would focus on fixing what’s broken when the work on new releases

1 Like
67

ok for anyone experiencing this issue.. I found a solution. In your CORS, make sure you put capacitor://yourdomain.com as well.