Laravel shared cookie detection issue in domain and subdomain -


i working on laravel 5.4.30.

imagine have domain example.com , subdomain of dev.example.com. main domain master branch , dev subdomain develop branch. have cookie notice system hidden after clicking on hide cookie notice button. works setting cookie forever. have set session_domain configs each domain each environment.

for main domain:

session_domain=example.com

for dev subdomain:

session_domain=dev.example.com

now issue comes here. if go example.com , click on hiding cookie notice, cookie set forever main domain. after go dev.example.com , same. cookie set subdomain well. cookie has been set after previous one. (the order important) if refresh subdomain, see notice again! (not hidden) browser has read main cookie because of .example.com set in domain parameter of cookie in browser, every subdomain affected. view still shows notice because cannot read cookie hiding.

anyway don't want share cookie across subdomains. how can achieve that? think should add prefix cookie name. don't know how it, laravel automatically adds prefix cookie name.

any solutions?

you need implement own "retrieving" , "setting" cookie.

retrieving (has, get) cookies

create new class (anywhere like, app/foundation/facades/) name cookie.

use \illuminate\support\facades\cookie cookiestock;  class cookie extends cookiestock {      //implement own has(...);     public static function has($key)     {         return ! is_null(static::$app['request']->cookie(prefix . $key, null)); //get prefix .env file case app_env     }      //implement own get(...);     public static function get($key = null, $default = null) {...} }

now open config/app.php , change corresponding alias (cookie).

setting (make) cookies

create new provider (use artisan), , copy-paste code illuminate\cookie\cookieserviceprovider.php , change namespaces. again open config/app.php , change corresponding service provider new one.

create new class (anywhere like, app/foundation/cookie/) name cookiejar.

use \illuminate\cookie\cookiejar cookiejarstock;  class cookiejar extends cookiejarstock {  //override method think relevant (my guess make(), not sure @ moment queue related methods)      public function make($name, $value, $minutes = 0, $path = null, $domain = null, $secure = false, $httponly = true)     {         // check before applying prefix         if (!empty($name)) {             $name = prefix . $name; // prefix same way before         }          return parent::make($name, $value, $minutes, $path, $domain, $secure, $httponly);     } }

update code in own cookie service provider use implementation of cookiejar (line 19).

run $ composer dump-autoload, , should done.


Comments

Post a Comment

Popular posts from this blog

Is there a better way to structure post methods in Class Based Views -

i'm using class based views in django , never specify url in ajax calls , omit action parameter in form because know these requests go through post method of class based view. notice view - profile page make many requests depending on user updating on page - post method become convoluted , if/else mess example: def post(self, request, *args, **kwargs): # handle user changing available date if request.post.get('availabledate') != none: self.updateavailabledate(request) return jsonresponse({'result':'success'}) if request.post.get('newprojectname') != none: creative_user = creativeuserprofile.objects.get(id = request.user.id) project = project.create_project(creative_user, request.post['newprojectname']) project.save() return jsonresponse({'projectid': project.id }) if request.post.get('projectimage') != none , request.files['file']: proj...
Read more

performance - Why is XCHG reg, reg a 3 micro-op instruction on modern Intel architectures? -

i'm doing micro-optimization on performance critical part of code , came across sequence of instructions (in at&t syntax): add %rax, %rbx mov %rdx, %rax mov %rbx, %rdx i thought had use case xchg allow me shave instruction , write: add %rbx, %rax xchg %rax, %rdx however, dimay found agner fog's instruction tables , xchg 3 micro-op instruction 2 cycle latency on sandy bridge, ivy bridge, broadwell, haswell , skylake. 3 whole micro-ops , 2 cycles of latency! 3 micro-ops throws off 4-1-1-1 cadence , 2 cycle latency makes worse original in best case since last 2 instructions in original might execute in parallel. now... cpu might breaking instruction micro-ops equivalent to: mov %rax, %tmp mov %rdx, %rax mov %tmp, %rdx where tmp anonymous internal register , suppose last 2 micro-ops run in parallel latency 2 cycles. given register renaming occurs on these micro-architectures, though, doesn't make sense me done way. why wouldn't register renamer ...
Read more

c# - Asp.net web api : redirect unauthorized requst to forbidden page -

im trying redirect unauthorized request forbidden page instead i'm getting forbidden page in response body , how can fix ? here's startup class : app.createperowincontext(storecontext.create); app.createperowincontext<applicationusermanager>(applicationusermanager.create); app.createperowincontext<applicationsigninmanager>(applicationsigninmanager.create); app.usecookieauthentication(new cookieauthenticationoptions { authenticationtype = defaultauthenticationtypes.applicationcookie, expiretimespan = timespan.fromdays(30), }); app.useexternalsignincookie(defaultauthenticationtypes.externalcookie); app.usetwofactorsignincookie(defaultauthenticationtypes.twofactorcookie, timespan.fromminutes(5)); app.usetwofactorrememberbrowsercookie(defaultauthenticationtypes.twofactorrememberbrowsercookie); the method im trying reach : [httpget] [authorize(roles = "admin")] public string getcurrentusername() { return userman...
Read more