View Issue Details

IDProjectCategoryView StatusLast Update
271Composrcorepublic2012-08-25 14:04
ReporterChris Graham Assigned ToChris Graham  
PrioritynormalSeverityfeature 
Status resolvedResolutionfixed 
Summary271: Configurable session cookie name
DescriptionComposr supports cookie domains and paths to segregate cookies, however if an Composr site is installed under the base URL of another, the cookies will conflict.
If you have not set domains and paths and have a screen that makes AJAX calls open on one site, the other site will continuously be logged out.

It's not a huge problem if you make the paths as specific as possible, as the deep path will take precedence for the deep site and the top site will not have access to the deep path cookies.

However it can be very confusing, and users will often struggle to understand how to use cookie domains and paths. It also is very difficult to debug as it requires emptying browser cookies each time you make a change (it is very easy to get confused).

It is easier to just use different names for each set of cookies. The login cookies support this, but not the session cookie. We should add support for renaming the session cookie.
TagsNo tags attached.
Attach Tags
Time estimation (hours)2
Sponsorship open

Sponsor

Date Added Member Amount Sponsored

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change