Re: [PATCH] Allow to specify a domain for a cookie

Hi Willy,

On Son 25.05.2008 14:51, Willy Tarreau wrote:
>
>On Sun, May 25, 2008 at 11:14:33AM +0200, Aleksandar Lazic wrote:
>>
>> On Son 25.05.2008 10:18, Willy Tarreau wrote:

[snipp]

>> ### e.g.:
>> Set-Cookie: _session_id=445aaa24bc9fe9b46f8408e494fd3b91; path=/
>> ###
>>
>> This cookie will not be send to the server like 'insert indirect'
>> mode.
>
>agreed, but this is not a problem (or I don't see your point).

I meant the 'cloned cookie'.
The abouve was only as example for a cookie without expire date, I haven't not known that without expire value the cookie is only for session.

>> I like the idea with such flow:
>>
>> config: option duplicate_cookie X expires Y domain Z ... lifetim
>>
>> Program:
>>
>> if the server have set the expire, ... values use it
>> if not take the configured options
>>
>> the sheduler must take a look about the lifetime of such a cookie.
>
>what would you like to look at in the cookie ? BTW, it is only the
>browser which is responsible for checking the validity.

Ok then it is clear, thanks for info.

Aleks Received on 2008/05/26 23:20