Question

I’m trying to set a cookie in one domain and access it from another. Is this possible?

Here’s what I’m doing in my app:

In a controller, the test action is accessed via this url:

http://myapp.com/account/test

def test
  cookies[:foo] = {
    :value => 'something',
    :domain => 'myapp.heroku.com'
  }
end

In same controller, the test2 action is accessed via this url:

http://myapp.heroku.com/account/test2

def test2 
  puts "foo=#{cookies[:foo]}"
end

but the value of cookies[:foo] is always blank. Is it possible to access the cookie from the heroku.com domain. I thought setting the :domain option would allow this.

Thanks.

Answer 1

The :domain option (and setting domain on cookies in general) only really works across subdomains. i.e. for app1.mysite.com and app2.mysite.com – you could set the cookie domain to .mysite.com and have it shared between the sub-domains.

This is just how cookies are designed to work. myapp.com and myapp.heroku.com are separate domains, not sub-domains, so attempting to set the domain this way isn’t going to work.

There are some ways to achieve true cross-domain cookies – but they are rather involved.