Error on iphone login

[xdubx]

Currently i have some errors reported from users on my nextcloud only from iphone. I testet it with the newest emulator with ios 17.5 and it works without problem. But one of the user have same same os with the same browser and patch state but he got the HA state error. On android or desktop devices the error does not appear.

is the error message after successful login with keycloak v25.0.2.

The cloud is setup with an new docker container and the keycloak also. On the keycloak side i get this error

Nextcloud don't have any error or warning.

After entering the cloud url without the plugin subpath. The user is than logged in.

[zorn-v]

I testet it with the newest emulator with ios 17.5 and it works without problem

How I must detect/debug that problem then ?

[xdubx]

I testet it with the newest emulator with ios 17.5 and it works without problem

How I must detect/debug that problem then ?

i currently waste 5 afternoons to reproduce the bug :) at this point. I don't understand why it have this behavior. Its the other error.

The only hint that i have. Maybe it can be an problem with the cookie consumption. Before i have an old keycloak provider v16 and update to v25. Keycloak wrote down in the patchnotes https://github.com/keycloak/keycloak/releases/tag/25.0.0
The default value SameSite=Lax causes issues with POST based bindings, mostly applicable to SAML, but also used in some OpenID Connect / OAuth 2.0 flows.
Maybe this is an hint.
At this point i'am out of ideas. I have only an macbook to reproduce the error. But some user that can force the bug. With the current ios version. The browsers are chome, safari, duckduckgo. As an webdev i know they have the save set of rules to operate in the sandbox on apple devices.

[xdubx]

here know ios 17 safari

and same error on duckduckgo
i had the same on v15 in the emulator.

[xdubx]

it seems to work with keycloak v24