View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
271 | Composr | core | public | 2011-07-13 08:49 | 2012-08-25 14:04 |
Reporter | Chris Graham | Assigned To | Chris Graham | ||
Priority | normal | Severity | feature | ||
Status | resolved | Resolution | fixed | ||
Summary | 271: Configurable session cookie name | ||||
Description | Composr supports cookie domains and paths to segregate cookies, however if an Composr site is installed under the base URL of another, the cookies will conflict. If you have not set domains and paths and have a screen that makes AJAX calls open on one site, the other site will continuously be logged out. It's not a huge problem if you make the paths as specific as possible, as the deep path will take precedence for the deep site and the top site will not have access to the deep path cookies. However it can be very confusing, and users will often struggle to understand how to use cookie domains and paths. It also is very difficult to debug as it requires emptying browser cookies each time you make a change (it is very easy to get confused). It is easier to just use different names for each set of cookies. The login cookies support this, but not the session cookie. We should add support for renaming the session cookie. | ||||
Tags | No tags attached. | ||||
Attach Tags | |||||
Time estimation (hours) | 2 | ||||
Sponsorship open | |||||