<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Dear all,</p>
<p>We have just installed Evergreen 3.11.0a (it is a fresh install
from the tarball) and have proceeded to setting up Czech as a
language to be used not only in the Bootstrap OPAC but also in the
staff client.</p>
<p>However, it seems that the staff client does not reliably keep
Czech as the interface language beyond the login screen.<br>
</p>
<p>After logging into the staff client (with the original login
screen being in Czech), a browser developer tool in Firefox says
that "Some cookies are misusing the recommended “SameSite“
attribute" (the attached screenshot provides the same information
in a visual format).<br>
</p>
<p>There is a link that provides more information on the nature of
the attribute:<br>
</p>
<p><a class="moz-txt-link-freetext" href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value">https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#samesitesamesite-value</a></p>
<p>It appears that eg.auth.token and eg.auth.time do not provide a
valid value for the aforementioned SameSite attribute, meaning
that Lax (as a fallback value) is used instead. This, according to
Mozilla.org, "Means that the cookie is not sent on cross-site
requests, such as on requests to load images or frames, but is
sent when a user is navigating to the origin site from an external
site (for example, when following a link). This is the default
behavior if the <code>SameSite</code> attribute is not specified."<br>
</p>
<p>Could that be a reason why the staff client does not honor the
selected locale and keeps changing things from Czech to English
(and sometimes also vice versa)?</p>
<p>If so, do you have any idea how to properly fix it?</p>
<p>If not, where else should we look? </p>
<p>I am also attaching our eg_vhost.conf with our current setup.</p>
<p>Thank you very much for any kind of help provided!</p>
<p>Linda<br>
</p>
</body>
</html>