Missing CORS and Cookie Config Silently Broke Cross-Origin Auth in Angular-ASP.NET App

·1 views

A developer building a School ERP system discovered that every API request from an Angular frontend to an ASP.NET Core backend returned 401 Unauthorized errors, despite both applications working correctly in isolation. No CORS error or exception was thrown; instead, the browser was silently discarding the authentication cookie on each cross-origin request. Investigation revealed three misconfigurations: the CORS policy lacked explicit credential allowance, the cookie defaulted to SameSite=Lax which blocks cross-origin cookies in modern browsers, and Angular was not configured to send credentials with requests. Fixing all three issues together — updating the CORS policy, setting SameSite=None with SecurePolicy=Always, and adding withCredentials: true in Angular — resolved the problem in roughly 10 lines of configuration. The developer noted that Postman masked the issue by being more permissive with cookies, making the browser's network tab the critical debugging tool.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Why Performance and Efficiency Are Critical for Fire TV Streaming Apps

App performance on Fire TV devices directly shapes viewer retention, as slow launches or stuttering navigation can prompt users to uninstall before engaging with any content. Fire TV hardware is significantly more constrained than modern smartphones, with low-end sticks offering around 1GB of RAM and 1.7GHz CPUs in sealed, passively cooled enclosures. Unlike mobile sessions lasting minutes, streaming sessions can run for hours, meaning gradual performance degradation becomes noticeable to viewers within a single evening. Performance regressions are particularly hard to detect because they leave no crash logs or alerts, and their cumulative impact often only surfaces in quarterly retention reviews. Development teams are advised to set explicit targets for metrics like cold start time, frame rate, and memory footprint well within device certification thresholds to maintain headroom for future updates.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Streaming Apps Need Session-Level Telemetry Beyond Aggregate Metrics

A technical framework published on DEV Community outlines the telemetry requirements streaming apps need to detect, trace, and resolve playback quality problems. The piece distinguishes between app health metrics—such as crash rates and UI responsiveness—and playback Quality of Experience (QoE) indicators like time to first frame and rebuffering, arguing the two must be tracked separately but linked within a session trace. Aggregate dashboards often mask failures that are concentrated within specific device families, OS versions, or marketplaces, making per-session telemetry essential for accurate diagnosis. The framework highlights that signals frequently exist in siloed systems across client, player, backend, ad service, and CDN layers, preventing teams from joining them quickly enough for release or on-call decisions. It recommends maintaining segmented breakdowns only when they meaningfully change an engineering decision, and dropping those that add dashboard noise without driving action.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Amazon Launches Fire TV Streaming App Quality Blueprint for Dev Teams

Amazon has introduced the Fire TV Streaming App Quality Blueprint, a six-part editorial series aimed at engineering, product, and program management teams responsible for streaming experiences on Fire TV. The series addresses the full lifecycle of app quality — from planning and design through development, testing, release, and live operations. It is structured around six pillars covering key aspects of the viewer experience and the operational model supporting it. Rather than a coding guide, the Blueprint is designed to help quality owners assess whether their app meets viewer expectations in areas such as reliability, playback, and stability. Amazon says the goal is to move quality conversations earlier in the development process, before issues become costly or visible to viewers in production.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Topology Spread Constraints Help Balance Pods Evenly in AWS EKS

Kubernetes Topology Spread Constraints allow engineers to distribute pods evenly across nodes, availability zones, and regions in AWS EKS clusters. The maxSkew parameter controls the maximum allowed difference in pod count between any two nodes or zones, preventing uneven workload distribution. Multiple constraints can be combined, with the scheduler applying AND logic to find the optimal pod placement. Using DoNotSchedule blocks pod creation if the spread condition cannot be met, while ScheduleAnyway allows flexible scheduling during AZ failures or resource shortages. This approach improves workload resilience and resource utilization across cloud infrastructure.

0 comments Read more at DEV Community