Guest Checkout redirects to login page in payment checkout step

[Former Member]

Hi all,

When i do guest checkout, after submission of delivery address
1. Sometimes the cart in the session is missing

If the above case succeeds, when i click on payment step

2. Sometimes it is redirecting it to login page

Anyone faced these issues?

Thank you

[christoph_probst · Accepted solution]

Check if you have the same JSESSIONID when you are redirected to the login page as before.

If you have a different JSESSIONID this could have several reasons.

1. You are on another backend node. Enable full session failover or sticky sessions.

2. The browser did not sent the cookie I have experienced it with google chrome when they changed their cookie policy. Be aware that change was suspended during covid crisis but will be re-enabled.

By default the cookies which have no SameSite attribute are now treated as SameSite=Lax not as before SameSite=None. Hence, you have to set the SameSite policy to avoid strange behavior.

See https://www.neowin.net/news/chrome-80-arrives-today-with-potentially-site-breaking-cookie-changes/ for more information.

Due to the fact that the last hop from payment provider back to the storefront is a POST request the session cookie was not send along.

The POST is NOT a safe HTTP method, so browser correctly WON'T send the SameSite=Lax cookies. So JSESSIONID won't be sent.

Exception: Be aware of the "Lax + Post mitigation". A cookie that is at most 2 minutes old will be sent on a top-level cross-site POST request. So yes, the JSESSIONID may be sent if you're fast enough.

I think this issue should be fixed on SAP site in the platform see also https://jira.hybris.com/browse/ECP-4711 and maybe also to change the POST to a GET on payment provider site if possible.