search

as-ideas / oil

191 stars 56 forks source link

Add option to set the domain of the SOI cookie #295

Open alexgit2k opened 4 years ago

alexgit2k commented 4 years ago

This is a rebased pull-request of #244 from @cphilleo.

The Problem

Multiple sites on sub-domains would like to share consent, e.g. sub1.example.com, sub2.example.com, sub3.example.com. This can be achieved by using the POI feature and specifying a common domain such as consent.example.com however there is overhead of at least 20K per page load to use POI.

Proposal

Since subdomains can set a shared cookie on the parent domain, it's more efficient to allow the SOI cookie to be set on the parent domain, and then be shared by all subdomains. This would be a form of group consent.

This pull request adds an option to set the domain to be used for the SOI cookie. Setting the cookie to an invalid non-parent domain results in no cookie being set.

edubz99 commented 2 years ago

This is solving an issue that we are currently facing, any chance this can be merged in ?