cookie domain-subdomain

Question

asked Jul 14 '11

107 ● 1 ● 8

Hi all!
I've deployed askbot on subdomain and I have another django application (blogs) that runs on main domain. Both share the same database, so users are registered and logged in only with askbot.
But now I want users that logged in on subdomain will be "logged in" on main domain automatically, and vice versa of course.
I added SESSION_COOKIE_DOMAIN = 'maindomain.com' to both askbot and blogs, but it doesn't help. What is common solution for this?
P.S. Tow applications are different django instances that everyone in its own virtualenv with own 'settings.py' file. Thanks!

edit:
Configs are same for two sites:

CACHES = {
'default': {
        'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
        'LOCATION': '127.0.0.1:11211',
        'KEY_PREFIX': 'production'
           }
    }
CACHE_MIDDLEWARE_ANONYMOUS_ONLY = True

#SESSION_ENGINE = 'django.contrib.sessions.backends.cache'
SESSION_COOKIE_DOMAIN = '.domain.org'
SESSION_COOKIE_NAME = "sesid"

I've tried various session engines, but seems that problem is not here..

Answer 1

0

DominiCattus has selected this answer as correct

answered Jul 14 '11

Evgeny

6665 ● 31 ● 49 ● 95
http://askbot.org/

updated Jul 14 '11

Please try SESSION_COOKIE_DOMAIN = '.maindomain.com'

(With the leading "dot" before "mydomain")

Does that help?

link

Comments

No, doesn't help unfortunately. I see that both sites have cookie ".maindoman.com", share the same session_id, just askbot site have also askbot_csrf cookie, and csrf_token that points to "maindomain.com" without dot. When I log in to one site, the other doesn't detect it.. When I log in with this user on other site also, he is logged out on the first one. Strange... DominiCattus (Jul 15 '11)

The leading dot makes the cookies recognizable across subdomains, so for any cookies you want to work like that - add the dot. Does common login work? If not probably it is because you are not sharing the session data between the sites. Evgeny (Jul 15 '11)

You're right. Looks like sessions conflict each with other. Any clue what can cause it? django_session is uniq table in DB that two sites use. Maybe caching sessions settings break the things here.. DominiCattus (Jul 20 '11)

I think the two sites are using different sessions, even though you save them all in the same table, I am reading the docs now. But why don't you install both on the same django project - is that impossible? Evgeny (Jul 20 '11)

Yeah.. Seems that it will be the final solution for this )) If using askbot as app, that's OK. DominiCattus (Jul 20 '11)

cookie domain-subdomain

1 Answer

Comments

Your answer

Question tools

Stats

Related questions