The auth_cookie_path option doesn't seem to have any effect

[anonymous]

There is an option introduced in #8486 and created to share cookies (in particular the auth cookie) between several trac instances. But setting this option doesn't seem to have any effect anymore.

One would expect that setting auth_cookie_path would make trac create cookies with that path set, but it continues to set them with "/name" as the path.

[slam@…]

Issue confirmed - tried with relative and absolute server path, and with uri as well.

[Remy Blank]

I'll check that. Can you please paste the relevant part of your trac.ini?

[osimons]

The cookie path is set correctly, there is just no support in Trac for handling the cross-project nature of the setting. It was added to support plugins that implement session/auth sharing.

The problem is basically this: The one project where login happens makes the auth token and stores in its database. How should another project be expected to find that record? A request to /login in that project will instead trigger a new local project token overwriting the old cookie.

Example use-case: ​th:SharedCookieAuthPlugin

[Remy Blank]

Thanks for checking. That's a "worksforme", then.