Cookies Received, but doesn't stored inside the browser

First Check

• I added a very descriptive title to this issue.
• I used the GitHub search to find a similar issue and didn’t find it.
• I searched the FastAPI documentation, with the integrated search.
• I already searched in Google “How to X in FastAPI” and didn’t find any information.
• I already read and followed all the tutorial in the docs and didn’t find an answer.
• I already checked if it is not related to FastAPI but to Pydantic.
• I already checked if it is not related to FastAPI but to Swagger UI.
• I already checked if it is not related to FastAPI but to ReDoc.

Commit to Help

• I commit to help with one of those options 👆

Example Code

Description

tldr; get responses back from cookies, but it doesn’t stored on the application, and still able to send it on every request.

I have a frontend framework with axios to communicate with backend fastapi. At first, cookies are set when tested with swagger UI.

but, when requesting with axios from frontend, it show me an error, so I followed the instruction from this issueshttps://github.com/tiangolo/fastapi/issues/3267

and now, I can get the responses but instead of getting cookies in browser, I only received responses and cookies are not setting in application tab. but when I send a request, cookies are always sent with requests.

Here is in detail:

Here is my code:

Frontend ( Svelte + Axios )

async function onclick(e){
  axios.defaults.withCredentials = true;
  let info = {};
  const formData = new FormData(e.target);
  json = Object.fromEntries(formData.entries())
  await axios.post('http://127.0.0.1:8000/login', json,  { withCredentials: true} )
    .then(response =>(
      info = response.data
    )
    )
  
    if (info.status == "Success"){
      console.log("Hello")
    }
}

Backend ( Fastapi )

@router.post('')
def login(response : Response,request: schemas.Login, db: Session = Depends(database.get_db)):
    user = db.query(models.Users).filter(models.Users.email == request.email).first()
    if not user:
        return "User doesn't exist"
    if not Hash.verify(user.password,request.password):
        return "Incorrect Password"
    access_token = jwttoken.create_access_token(data={"sub": user.email, "id" : user.id})
    response.set_cookie(
        key="token",
        value=access_token,
        httponly=True,
        secure=True,
        samesite='none',
    )
    return {"status": "Success", "token": access_token}

Middleware ( CORS )

origins = [
    "http://localhost",
    "http://localhost:3000",
]


middleware = [
    Middleware(
        CORSMiddleware,
        allow_origins=origins,
        allow_credentials=True,
        allow_methods=['*'],
        allow_headers=['*']
    )
]

app = FastAPI(middleware=middleware)

Operating System

Windows

Operating System Details

Window 11

FastAPI Version

0.79.0

Python Version

3.10

Additional Context

No response

[TomEverson]

Well, I found a bug I think it is cause by starlette.middleware and I used Fastapi to set cookie When I changed to CORS setting back to Fastapi It works well !

[tiangolo]

Thanks for the help here everyone! 👏 🙇

Thanks for reporting back and closing the issue 👍