#271 - Configurable session cookie name

Identifier #271
Issue type Feature request or suggestion
Title Configurable session cookie name
Status Completed
Handling member Chris Graham
Addon core
Description Composr supports cookie domains and paths to segregate cookies, however if an Composr site is installed under the base URL of another, the cookies will conflict.
If you have not set domains and paths and have a screen that makes AJAX calls open on one site, the other site will continuously be logged out.

It's not a huge problem if you make the paths as specific as possible, as the deep path will take precedence for the deep site and the top site will not have access to the deep path cookies.

However it can be very confusing, and users will often struggle to understand how to use cookie domains and paths. It also is very difficult to debug as it requires emptying browser cookies each time you make a change (it is very easy to get confused).

It is easier to just use different names for each set of cookies. The login cookies support this, but not the session cookie. We should add support for renaming the session cookie.
Steps to reproduce

Funded? No
The system will post a comment when this issue is modified (e.g., status changes). To be notified of this, click "Enable comment notifications".

Rating

Unrated