# How to set a set cookie in the management screen?

**URL:** <https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453>\
**Category:** Get Help\
**Tags:** api\
**Created:** [December 8, 2021, 6:21am UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453 "2021-12-08T06:21:25Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [December 22, 2021, 10:17pm UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/22 "2021-12-22T22:17:01Z")

</div>

You can send them this information I posted previously.

> We explicitly set it to `none` when saving cookies, at least for HTTPS. If no HTTPS, we use the browser default by not specifying a value at all.[auth0-spa-js/storage.ts at 0c6166c0f1dd7c8405b7231d0074c1eb0d8a164f · auth0/auth0-spa-js · GitHub](https://github.com/auth0/auth0-spa-js/blob/0c6166c0f1dd7c8405b7231d0074c1eb0d8a164f/src/storage.ts#L36)
> 
> If they’re testing on `localhost` , it could be (I’m assuming Chrome) defaulting to `lax` if the SameSite attribute is not specified. See [this Chrome feature](https://chromestatus.com/feature/5088147346030592) which started rolling out from July 2020. So it could be Chrome just reporting that default.
> 
> When SameSite was implemented in this SDK, we decided at the time to specify `none` when running on HTTPS, and not specify anything at all (inherit browser defaults) when not running on HTTPS.

---

<div class="post-metadata">

**Author:** ![lliuxu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lliuxu/32/33591_2.png) [@lliuxu](https://community.auth0.com/u/lliuxu)\
**Post date:** [December 23, 2021, 3:16am UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/23 "2021-12-23T03:16:32Z")

</div>

Thankyou for your support.  
I’ll try to explain.

For example, ‘domain name a’ and ‘domain name B’ use the same auth0 application. What will be passed in the set-cookie?  
For example: token? Or what information? We need to evaluate whether the information leakage will cause harm to our customers?

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [December 23, 2021, 2:53pm UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/24 "2021-12-23T14:53:36Z")

</div>

@lliuxu,

You can see the contents of that cookie by inspecting the application. It contains a boolean value to indicate if the application should perform a silent auth request (just a request, not a form of authentication).

---

<div class="post-metadata">

**Author:** ![lliuxu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lliuxu/32/33591_2.png) [@lliuxu](https://community.auth0.com/u/lliuxu)\
**Post date:** [December 24, 2021, 1:55am UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/25 "2021-12-24T01:55:37Z")

</div>

Thank you for your support.

Is that the one below?

 ![image](https://global.discourse-cdn.com/auth0/original/3X/a/4/a45c13df254d193dc0f9772f5421852a9cbd2b2f.png)

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [January 4, 2022, 7:59pm UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/26 "2022-01-04T19:59:11Z")

</div>

That appears to be a different cookie.

---

<div class="post-metadata">

**Author:** ![lliuxu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lliuxu/32/33591_2.png) [@lliuxu](https://community.auth0.com/u/lliuxu)\
**Post date:** [January 5, 2022, 12:38am UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/27 "2022-01-05T00:38:44Z")

</div>

Are they 1 and 2 below?

 ![image](https://global.discourse-cdn.com/auth0/original/3X/7/a/7ad06505f08af404599a938b4e350352382d66f3.png)

---

<div class="post-metadata">

**Author:** ![dan.woda](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/dan.woda/32/18340_2.png) [@dan.woda](https://community.auth0.com/u/dan.woda)\
**Post date:** [January 5, 2022, 2:26pm UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/28 "2022-01-05T14:26:15Z")

</div>

According to your previous post, yes those match the cookies in discussion.

---

<div class="post-metadata">

**Author:** ![lliuxu](https://sea1.discourse-cdn.com/auth0/user_avatar/community.auth0.com/lliuxu/32/33591_2.png) [@lliuxu](https://community.auth0.com/u/lliuxu)\
**Post date:** [January 6, 2022, 12:50am UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/29 "2022-01-06T00:50:48Z")

</div>

Thankyou for your support.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/auth0/original/3X/b/5/b560f266932fcce5d57f09a6595bd50518cae3f3.jpeg) [@system](https://community.auth0.com/u/system)\
**Post date:** [January 21, 2022, 12:51am UTC](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453/30 "2022-01-21T00:51:25Z")

</div>

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.

[Previous page](https://community.auth0.com/t/how-to-set-a-set-cookie-in-the-management-screen/74453.md?page=1)
