Cordova/Android中后续请求未携带Set-Cookie问题求助

• 客户端：运行在Android模拟器（localhost）的Cordova应用
• 服务器：远程服务器

请求流程 #

• 客户端通过POST发送登录凭证
• 服务器返回Set-Cookie: TOKEN=TOKEN
• 客户端发送另一请求（应携带该Cookie）

服务器登录接口响应头 #

Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://localhost
Content-Length: 757
Content-Security-Policy: img-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests
Content-Type: application/json; charset=utf-8
Cross-Origin-Opener-Policy: same-origin
Cross-Origin-Resource-Policy: same-origin
Date: Fri, 05 Apr 2024 22:55:12 GMT
Etag: W/"2f5-cF2DgIYE70TbTgbAxYrSxvRZvYU"
Origin-Agent-Cluster: ?1
Referrer-Policy: no-referrer
Server: nginx
Set-Cookie: TOKEN=CONTENT; Path=/; Expires=Sat, 06 Apr 2024 22:55:11 GMT; HttpOnly; Secure; SameSite=None
Strict-Transport-Security: max-age=15552000; includeSubDomains
Strict-Transport-Security: max-age=31536000
Vary: Origin
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Xss-Protection: 0

客户端/api/route请求头 #

:Authority: remote.server.dns.com
:Method: GET
:Path: /api/route
:Scheme: https
Accept: */*
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Access-Control-Allow-Origin: https://remote.server.dns.com:443
Content-Type: application/json;charset=UTF-8
Origin: https://localhost
Referer: https://localhost/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
User-Agent: Mozilla/5.0 (Linux; Android 14; sdk_gphone64_x86_64 Build/UE1A.230829.036.A1; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/113.0.5672.136 Mobile Safari/537.36
X-Requested-With: com.dns.sub

服务器拒绝上述/api/route请求，原因是该路由需要Cookie鉴权，但请求未携带登录时返回的TOKEN Cookie。

注：不询问Cookie持久性或客户端Cookie定义相关问题。

已尝试操作：

• 配置/不配置Access-Control-Allow-Credentials
• 配置/不配置Access-Control-Allow-Origin
• 使用/不使用多款Cordova插件
• 咨询ChatGPT未解决问题

内容的提问来源于stack exchange，提问作者Crapaud