View Issue Details

IDProjectCategoryView StatusLast Update
0000271Composrcorepublic2012-08-25 14:04
ReporterChris GrahamAssigned ToChris Graham 
SeverityFeature-request 
Status resolvedResolutionfixed 
Product Version 
Fixed in Version 
Summary0000271: Configurable session cookie name
DescriptionComposr supports cookie domains and paths to segregate cookies, however if an Composr site is installed under the base URL of another, the cookies will conflict.
If you have not set domains and paths and have a screen that makes AJAX calls open on one site, the other site will continuously be logged out.

It's not a huge problem if you make the paths as specific as possible, as the deep path will take precedence for the deep site and the top site will not have access to the deep path cookies.

However it can be very confusing, and users will often struggle to understand how to use cookie domains and paths. It also is very difficult to debug as it requires emptying browser cookies each time you make a change (it is very easy to get confused).

It is easier to just use different names for each set of cookies. The login cookies support this, but not the session cookie. We should add support for renaming the session cookie.
TagsNo tags attached.
Time estimation (hours)2
Sponsorship open

Activities

There are no notes attached to this issue.

Issue History

Date Modified Username Field Change