Description of the issue:
When trying to use https://che.openshift.io/, which is a web based code editor, I cannot log in unless I globally allow third party cookies. Turning just the shield off for the website doesn’t work.
I have tried to create a whitelist entry in brave://adblock, but literally got nowhere with that.
How can this issue be reproduced?
- Create a free RedHat Developer account
- Turn off shield
- Create a workspace in the Che dashboard
- Try to switch to the workspace
workspace loads and code editor is seen
Brave Version( check
Version 1.0.1 Chromium: 78.0.3904.108 (Official Build) (64-bit)
The failing call is:
GET wss://***********.starter-us-east-2.openshiftapps.com/services HTTP/1.1 Host: ***********.starter-us-east-2.openshiftapps.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache Upgrade: websocket Origin: https://***********.starter-us-east-2.openshiftapps.com Sec-WebSocket-Version: 13 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-GB,en;q=0.9 Sec-WebSocket-Key: rvDHFNeIg8eKeD7PgsVqTw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
Which returns a 302 without third party cookies allowed, and a 101 with them allowed.