Question

Is it possible to set a session cookie on login.app.com, and have the session cookie available on foo.app.com?

I want to have a central login location: login.app.com. Once user Cayote logs in at login.app.com, I want to transport him to his page on its own subdomain: acme.app.com. Once he gets there, he should be logged in.

I’m not sure how to bridge the gap between login.app.com and acme.app.com.

I’m using Rails 3.2.

Answer 1

Yes it’s possible. You just have to declare your cookie for all your subdomains:

# config/initializers/session_store.rb
Testapp::Application.config.session_store :cookie_store, key: '_testapp_session', :domain => :all

By declaring domain => :all, the cookie for login.app.com and acme.app.com will be set with the domain .app.com so the session will be shared between the subdomains.