title: Identity Server 4 Silent Renew ErrorResponse: login_required
body: <p>I have cloned the repo from the <a href="https://github.com/maxmantz/redux-oidc-example" rel="noreferrer">redux-oidc-example</a> and it works for the most part but after a few hours it gives the following error: </p>
  
  <blockquote>
    <p>Action payload: ErrorResponse: login_required <br/>
        at new e (oidc-client.min.js:1)<br/>
        at t [as _processSigninParams] (oidc-client.min.js:1) <br/>
        at t [as validateSigninResponse] (oidc-client.min.js:1) <br/>
        at oidc-client.min.js:1</p>
  </blockquote>
  
  <p>UserManager.js looks like this:</p>
  
  <pre><code>const userManagerConfig = {
    client_id: 'js.dev',
    client_secret: 'secret',
    redirect_uri: `${window.location.protocol}//${window.location.hostname}${window.location.port ? `:${window.location.port}` : ''}/callback`,
    response_type: 'id_token token',
    scope: 'openid email profile role offline_access',
    authority: 'http://localhost:8080',
    silent_redirect_uri: `${window.location.protocol}//${window.location.hostname}${window.location.port ? `:${window.location.port}` : ''}/silent_renew.html`,
    automaticSilentRenew: true,
    filterProtocolClaims: true,
    loadUserInfo: true
  };
  </code></pre>
  
  <p>and my identity server config: </p>
  
  <pre><code>{
          "Enabled": true,
          "ClientId": "js.dev",
          "ClientName": "Javascript Client",
          "ClientSecrets": [ { "Value": "K7gNU3sdo+OL0wNhqoVWhr3g6s1xYv72ol/pe/Unols=" } ],
          "AllowedGrantTypes": [ "implicit", "authorization_code" ],
          "AllowedScopes": [ "openid", "email", "profile", "role", "offline_access" ],
          "AllowOfflineAccess": true,
          "AllowAccessTokensViaBrowser":true,
          "RedirectUris": [
            "http://localhost:8081/callback",
            "http://localhost:8081/silent_renew.html"
          ],
          "PostLogoutRedirectUris": [
            "http://localhost:8081"
          ],
          "AccessTokenLifetime": 900,
          "RequireConsent": false
        }
  </code></pre>
  
  <p>I noticed that prior to error last valid response had one cookie response(idsrv.session) with empty value with the expiry date set to the previous year: </p>
  
  <p><a href="https://i.stack.imgur.com/E56fs.png" rel="noreferrer"><img src="https://i.stack.imgur.com/E56fs.png" alt="idsrv.session cookie"></a></p>
  
  <p>I believe this to be the root cause of the issue, I searched it on related Github repo and tried to add the Cookie.SameSite to none but it didn't help: </p>
  
  <pre><code>services.AddAuthentication()
                  .AddSaml(Configuration,externalProviders.UseSaml)
                  .AddCookie(options =&gt; {
                      options.SlidingExpiration = true;
                      options.ExpireTimeSpan = TimeSpan.FromDays(30);
                      options.Cookie.SameSite = SameSiteMode.None;
                  });
  </code></pre>
  
  <p>Any idea!  </p>