For technical reasons (OIDC library uses CORS requests to renew API access tokens), our application requires that when using the Brave browser, the security shields built into Brave be either disabled or cross-site cookies enabled.
Any ideas or suggestions on the best way to inform the user of this?
During the login process, we could just have some italic text for this, but would be easily ignored.
I was envisioning perhaps having the Brave logo somewhere in the app, perhaps in the footer with a tooltip / overlay and a popup on click that clarified that the authentication session will not renew past 6 minutes without cross-site cookies enabled and a description of how to enable this.
Any other ideas or thoughts on the best ways to convey this to our users as painlessly as possible?
Thanks, really appreciate any and all suggestions!