Keycloak: Session cookies are missing within the token request with the new Chrome SameSite/Secure cookie enforcement

Question

Recently my application using Keycloak stopped working with a 400 token request after authenticating.

What I found so far is that within the token request, the Keycloak

Answer 1

For those who are looking for a short time solution until they update their libraries.

You can do the following in Chrome:-

• Go to chrome://flags/
• Search for "Samesite"
• Disable "SameSite by default cookies" and "Cookies without SameSite must be secure" flags.
• Relaunch.