cy.setCookie() set in beforeAll influence on all cy.request()

Current behavior

cy.request() set cookie from cy.setCookie(). I use cy.setCookie() for service (X) where I execute UI test, I sent cy.request() to the other service (Y), value from cy.setCookie() for service X is not suitable for service Y

Desired behavior

No response

Test code to reproduce

code in suport/index.ts

beforeEach(() => {
  // hide cookie policy box
  cy.setCookie('cookieconsent_status', 'dismiss')
});

Code in test

  cy.request({
      method: 'POST',
      url: `${providerPortalURL}/api/provider/`,
      form: false,

      headers: {
        Authorization: authorization,
        "Content-Type": "application/json"
      },
      body: (JSON.stringify(provider))
    });

request to be sent

Cypress Version

9.5.3

Node version

16.13.0

Operating System

Ubuntu 20.04

Debug Logs

No response

Other

No response

[ZachJW34]

After more investigation, the default domain for setCookie should be window.location.hostname. This isn’t what is actually happening as the cookie set on a sub-domain results in the superdomain being set. @Marcelinna you wouldn’t be seeing this bug if the behavior was matching the docs as the second domain (providerPortalUrl) wouldn’t receive the cookie set on your baseUrl subdomain.

I’ve created a reproducible example that makes this behavior clear: https://github.com/cypress-io/cypress-test-tiny/tree/zachw/cookie-subdomain-bug

A summary of what the repro demonstrates:

Current behavior

• cy.visit('https://subdomain1.example.com')
• cy.setCookie('my_cookie', 'is_really_tasty') -> domain = .example.com
• cy.request('https://subdomain2.example.com') -> cookie is included in request

Expected behavior

• cy.visit('https://subdomain1.example.com')
• cy.setCookie('my_cookie', 'is_really_tasty', { domain: window.location.hostname }) -> domain = subdomain1.example.com
• cy.request('https://subdomain2.example.com') -> cookie is not included in request

Here is a (private) Slack Thread with more info.

@Marcelinna as for a workaround, can you try using:

cy.window().then((win) => {
    cy.setCookie("cookieconsent_status", "dismiss", { domain: win.location.hostname });
})

[ZachJW34]

@Marcelinna From the (private) information you provided me, the baseUrl and the providerPortalURL are on the same domain so the cookie should be shared when making a request to the providerPortalURL.

Can you try explicitly setting the domain in cy.setCookie('cookieconsent_status', 'dismiss', { domain: 'xxx' })? You can check your devtools and copy the domain attached to your cookieconsent_status