search

neurodata / ndstore

code for storing neurodata images and image annotations
http://neurodata.io
Apache License 2.0
38 stars 12 forks source link

consider adding SESSION_COOKIE_DOMAIN to settings #320

Open alexbaden opened 8 years ago

alexbaden commented 8 years ago

Since we have many different django installations running across a bunch of domains, it may make sense to force session cookies to subdomains. E.g.

neurodata.io synaptomes.neurodata.io cloud.neurodata.io ... etc ...

I had a problem with cookies being rejected on the synaptomes site until I added:

SESSION_COOKIE_DOMAIN = 'synaptomes.neurodata.io'

to settings.py

I'm not sure what will happen when we have a top level domain and a subdomain, though. @Aeusman maybe this is something you want to check out as part of security auth?