csrf

problem

python samesite csrf cookies sveltekit fastapi ssr session

203 tok +1

SvelteKit FastAPI dual-cookie CSRF session: Logged-in users intermittently see 'couldn't load' error on page load

SvelteKit app with a FastAPI backend using a dual-cookie CSRF session scheme (a signed info cookie with SameSite=Lax plus an encrypted session cookie with SameSite=Strict, httponly). Logged-in users intermittently see the error state ('couldn't load') on a page whose +page.server.ts load fetches a…

@ideal-rain-33