Configuring Rails App to handle multiple subdomains and multiple cookies

Question

I have a rails app which supports multiple domains and each domain may have multiple subdomains.

Users visiting mydomain1.com do not receive the same experience as mydomain2.com (although the base behaviour of the apps is the same)

Therefore, if a user is logged in to mydomain1.com, it shouldn't then be logged in to mydomain2.com

If a user is logged in to france.mydomain1.com, it should then be logged in to germany.mydomain1.com

Previously, I've handled this by setting the domain in the session store configs:

MyApp::Application.config.session_store :cookie_store, :key => '_MyApp_session', :domain => APP_CONFIG[:domain]

I'm trying to work out the best way to handle this with multiple domains?

I've tried hacking around ActionDispatch::Callback but the request is not available from within there.

Can anybody suggest a good way of supporting multiple cookies from within one app?

Ideally I'd like to create a fresh cookie for each subdomain.

Have you tried it yet? It shouldn't be an issue since cookies are only valid for the domain that set them. I have a similar setup with no problems. — Wukerplank
– Wukerplank, Commented May 17, 2011 at 8:17
I haven't tried it in a live setup yet... I need to edit my question though as there's more to the problem. — bodacious
– bodacious, Commented May 17, 2011 at 8:25

Anton · Accepted Answer · 2011-05-17 19:00:00Z

5

You should do that:

class ActionDispatch::Session::MultiDomainStore < ActionDispatch::Session::CookieStore
  def initialize(app, options = {})       
    super(app, options.merge!(:domain => compute_domain(app)))      
  end

  def compute_domain(app)
    ...
  end
end

MyApp::Application.config.session_store :multi_domain_store, :key => '_MyApp_session'

I.e. your domain should start with the dot.

edited May 17, 2011 at 19:00

answered May 17, 2011 at 11:49

Anton

1,4038 silver badges12 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

bodacious Over a year ago

I can't specify just one domain - the app should support many domains and many subdomains

Anton Over a year ago

Then you should create custom session store. See updated answer

Wukerplank · Accepted Answer · 2011-05-17 08:40:30Z

2

It shouldn't be an issue as cookies are only valid per domain. You can have a _MyApp_session for example1.com and one for example2.com. The cookies are managed by the browser and only sent to the host if the domain matches.

Say you visit example1.com and log in and you will get a cookie with the value abcdef123. Then you log into example2.com and you will get another cookie with a random string uvwxyz890.

If you return to example1.com later, the browser will only send the cookies that are valid for this domain to your app. Your app won't have to manage anything and you don't have to hack anything.

answered May 17, 2011 at 8:40

Wukerplank

4,1742 gold badges32 silver badges45 bronze badges

1 Comment

bodacious Over a year ago

The problem is that I want cookies to be shared across each subdomain - but not each domain.

Collectives™ on Stack Overflow

Configuring Rails App to handle multiple subdomains and multiple cookies

2 Answers 2

2 Comments

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related