Troubleshooting 'stale request' error

[Cantor, Scott]

> The day before we received this ticket we enabled the SameSite filter to address
> this very issue.

There are only a small set of scenarios, generally involving frames, where this is relevant. SSO mostly works fine without SameSite unless you're proxying, with a few edge cases that do not cause an error, just more frequent re-authentication.

> Does anyone have any suggestions for troubleshooting the problem?

You learn the internals of the system and how WebFlow operates with regard to cookies and sessions, and then you trace and debug it. That's about it. There is no way to learn anything from logs and most often if there is anything "in" the log about it, it's the absence of logging that is significant.

> Also, is there a way to verify that the filter is actually working?

You trace the traffic and observe the Set-Cookie headers.

-- Scott