Feature #14237

Allow custom path for "_redmine_session_" cookie

Added by Mirko Geissler over 4 years ago. Updated almost 2 years ago.

Status:ClosedStart date:
Priority:NormalDue date:
Assignee:-% Done:

0%

Category:Accounts / authentication
Target version:-
Resolution:

Description

We are running two redmine instances in one domain and hit a problem when logging in to both instances concurrently. Without enabling autologin on login both instances interfere with each other while browsing through issues etc. Usually the other instance logs out immediately.

I have set the configs as follows:

First instance:
autologin_cookie_name: "first_instance_autologin"
autologin_cookie_path: "first_instance"
autologin_cookie_secure:

Second instance:
autologin_cookie_name: "second_instance_autologin"
autologin_cookie_path: "second_instance"
autologin_cookie_secure:

When enabling autologin I can see that the autologin cookie is put into its subpath defined above correctly when browsing but the "_redmine_session_" cookie is still in path "/".

My assumption is that this cookie also needs to be placed in a unique path. If this is the issue here I would kindly ask to add this configuration option straight forward.

Thank you!


Related issues

Related to Redmine - Patch #21169: Use config.relative_url_root as the default path for sess... Closed

History

#1 Updated by Toshi MARUYAMA over 4 years ago

Copy config/additional_environment.rb.example to config/additional_environment.rb
and add following code.

config.session_store :cookie_store, {
      :key  => '_redmine_test_session',
      :path => '/test00',
}

#2 Updated by Daniel Ritz almost 2 years ago

See #21169

#3 Updated by Toshi MARUYAMA almost 2 years ago

  • Status changed from New to Closed

I think this is superseded by #21169.

#4 Updated by Toshi MARUYAMA almost 2 years ago

  • Related to Patch #21169: Use config.relative_url_root as the default path for session and autologin cookies added

Also available in: Atom PDF