Ticket #289 (defect)

Copied from ticket:350

In order to support multiple applications on one server (using virtual path filter, for example) it is extremely helpful to be able to define the path for the session cookie. This way we can use the same cookie name without any problems.

To support this, I made the following changes to sessionfilter.py:

154a155,158 > > # Get cookie path from config > cookiePath = conf('sessionFilter.cookiePath', '/') > 158c162 < cookie[cookieName]['path'] = '/' --- > cookie[cookieName]['path'] = cookiePath

After some further development, this seems even more useful (sessionfilter.py, line 156):

# Get cookie path from config or headers
# NOTE: sessionFilter.cookiePath always takes precedence
cookiePath = '/'
headerName = conf('sessionFilter.cookiePathFromHeader', '')
if headerName:
    cookiePath = cherrypy.request.headerMap.get(headerName,'/' )
if conf('sessionFilter.cookiePath', ''):
    cookiePath = conf('sessionFilter.cookiePath', '/')

The new config options are:

sessionFilter.cookiePath specifies an alternate path to use when setting the session cookie.

sessionFilter.cookiePathFromHeader specifies the name of a request header that will contain the cookie path to use i.e. "CP-Location". Very useful when serving multiple applications from different paths under Apache.

Fixed in [289]