What is expected behavior of token.getWithoutPrompt in web browser on mobile device?

[yermasog]

Describe the bug

Not as much a bug as a question or clarification.

I have a web app that is working perfectly in desktop; no issues. When I try to log in on a mobile device using a web browser, token.getWithoutPrompt fails. I've tested this on iOS16 on chrome and android 13 on chrome and it fails.

It also fails on desktop browser in dev tools when I switch to mobile view. I have tried this in edge and chrome. I am aware that safari is already blocking third party cookies so I didn't bother with it.

I understand that token.getWithoutPrompt is a web browser only feature, but I would still expect it to work in this case?

This app is using an old version. I looked through the change/release logs to see if there were any changes around this issue and didn't find any

Reproduction Steps?

Log into a web app on mobile

SDK Versions

edge Version 117.0.2045.35
chrome Version 116.0.5845.187
@okta/okta-auth-js 5.6
@okta/okta-signin-widget 5.12

Additional Information?

No response

[jaredperreault-okta]

I have a web app that is working perfectly in desktop; no issues. When I try to log in on a mobile device using a web browser, token.getWithoutPrompt fails. I've tested this on iOS16 on chrome and android 13 on chrome and it fails.

getWithoutPrompt will only succeed if a session already exists between the browser and Okta. Is that true when you test on mobile?

It also fails on desktop browser in dev tools when I switch to mobile view. I have tried this in edge and chrome. I am aware that safari is already blocking third party cookies so I didn't bother with it.

Mobile view, as in the mobile viewport toggle? Are there any errors that are logged to the js console?

[yermasog]

This is an android phone running on chrome connected to the debugger. From the console you can see that the okta session was established successfully. getWithoutPrompt is called to exchange the token.

An interesting behavior: on mobile, if a user switches to desktop mode, they are able to successfully login, and then can switch back to the mobile site without issue.

I did enable third party cookies, but could it be possible that chrome is blocking third party cookies on mobile?