Cookie “hf-chat” has been rejected because there is an existing “secure” cookie.

[ljw20180420]

Bug description

I use ghcr.io/huggingface/chat-ui-db:latest to host ChatUI in docker. If PUBLIC_ORIGIN="http://localhost" in .env.local and visit ChatUI through http://localhost:3000, it works well. Then I try to replace localhost by my domain name qiangwulab.sjtu.edu.cn. For the sake of testing, I modify /etc/hosts so that qiangwulab.sjtu.edu.cn is resolved to 127.0.0.1. I visit ChatUI through http://qiangwulab.sjtu.edu.cn:3000. It does not work with a similar page as in #1057. The firefox console shows

Cookie “hf-chat” has been rejected because a non-HTTPS cookie can’t be set as “secure”.

#1057 says that I should use ALLOW_INSECURE_COOKIES=true. It still does not work, and the firefox console shows

Cookie “hf-chat” has been rejected because there is an existing “secure” cookie.

ALLOW_INSECURE_COOKIES=true seems to be Legacy. Thus, I also tried COOKIE_SAMESITE="lax" and COOKIE_SECURE=false. The effect is the same. The firefox console shows

Cookie “hf-chat” has been rejected because there is an existing “secure” cookie.

Is it possible to use http for domain name other than localhost?

Steps to reproduce

Screenshots

Context

Logs

// logs here if relevant

Specs

• OS: ubuntu 24.04
• Browser: firefox
• chat-ui commit: ghcr.io/huggingface/chat-ui-db:latest

Config

Notes