Session cookies lack the ability to set the domain
Opened this issue · 3 comments
cimmanon commented
The site I'm working on makes use of subdomains. We would like to allow our users to login once and have that session persist across all subdomains in addition to the primary domain. Currently, session cookies are set for the domain that was used when the session was started.
ozataman commented
I am not even sure if what you suggest is possible. Can a cookie have more than one domain? I've never had to do it that way, so I'm not sure. You typically end up playing some iframe tricks to achieve that kind of cross-domain integration...
Deleted user commented
You just set the cookie's domain to .example.com and it will be sent to all subdomains of example.com.
sopvop commented
@amontague is absolutely right here. rfc6265