Question

I have a login form that points to secure.example.com, it initializes the session and then redirects to http://www.example.com

When redirected, the session is not created. Going back to secure.example.com then the session is created. Is this a limitation of how cookies work as I think?

Of course I have added the domain: :all in session_store, with the same result.

I’m using Ruby on Rails 3.2

Answer 1

My configuration was fine, as I configured domain: :all, and that’s all what it’s needed.

The problem in my case was that I had to define the domain: :all in all my cookies, like this:

cookies[:new_cookie] = { :value => "value", domain: :all }

And when deleting them:

cookies.delete :new_cookie, domain: :all

After this change, everything works as expected.