DevForum login loop bug

I’ve been running into a login loop on the DevForum when using any Chromium browser (Chrome, Edge, Brave, etc.). When I try to log in, it keeps bouncing between /login and the main page without ever actually logging me in.

After checking the network requests, it looks like the issue is caused by the forum session cookie being set with SameSite=Lax. The Roblox login flow redirects between multiple domains (roblox.com > auth.roblox.com > devforum.roblox.com), and Chromium treats that as a cross‑site redirect. With SameSite=Lax, the browser won’t send the cookie back to the DevForum, so the session never sticks and it loops forever.

Right now the cookie is being set like this:
SameSite=Lax

To fix the login loop, it needs to be:
SameSite=None; Secure

That allows the cookie to be sent during the cross‑site redirect, which is required for the SSO flow to work in Chromium.

Firefox works fine because it handles the redirect differently, but Chromium blocks it unless SameSite=None is used.

Page URL: https://devforum.roblox.com/

7 Likes

fun fact: this also happens when you are suspended

2 Likes

Hi, sorry for the late follow-up here. We mitigated this and rolled back the change that caused the issue shortly after it was reported.

Thanks again for reporting it. I’m going to close this out now, but please let us know if you run into a similar issue again.

2 Likes

i can confirm this :pensive_face:

yes yes yes