appirio-tech / accounts-app

accounts.topcoder.com
2 stars 25 forks source link

Domain of v3jwt token #111

Closed birdofpreyru closed 7 years ago

birdofpreyru commented 7 years ago

I have already asked about it in some channels on Slack, but as it did not result in any changes, I open this ticket here :)

Right now, when authentication is handled by accounts connector, Topcoder auth token v2 is written into tcjwt cookie, under topcoder.com / topcoder-dev.com domains, but auth token v3 is written into v3jwt cookie under accounts.topcoder.com / accounts.topcoder-dev.com domains. As the result, when the user of connector sends a request to the server (from its own subdomain of topcoder.com), only tcjwt cookie is sent along with the request, while v3jwt is not (because it is explicitely set for a different subdomain). Can we ensure that v3jwt cookie is set for topcoder.com / topcoder-dev.com domains as well?

vikasrohit commented 7 years ago

@birdofpreyru I think we can close this now. :)

birdofpreyru commented 7 years ago

Right! :)