Linked Questions
55 questions linked to/from How do browser cookie domains work?
1
vote
0
answers
2k
views
Laravel Cookies Not Saved in Browser [duplicate]
I am using Laravel 5.8 and I am separating out my frontend and backend and currently testing on my localhost.
I've fixed some terrible CORS issues, and I do not want to install an external composer ...
28
votes
4
answers
20k
views
How do I persist cookies when using HTTPUrlConnection?
I've begun using the recommended HTTPUrlConnection and moved away from the DefaultHTTPClient. One of the things that I haven't been able to glue back together is the use of a persistent cookie store. ...
15
votes
2
answers
23k
views
Persistent Cookie store using okhttp 2 on Android
In my Android app, I am trying to switch from android-async-http to okhttp which supports async networking sind version 2.0. While the former ships with an implementation of a persistent cookie ...
13
votes
3
answers
16k
views
sub-domain cookies, sent in a parent domain request?
Are sub-domain cookies sent in a parent domain HTTP request?
For instance, say I have the cookies:
Name Value Domain (not https)
ABC 1 .example.com
XYZ 0 foo....
10
votes
1
answer
17k
views
Using the antiforgery cookie in ASP.NET Core but with a non-default CookieName
I'm thinking about changing name of the default antiforgery cookie in ASP.NET Core.
The reason why I would like to change the cookie name is to anonymize the cookie, in my opinion there is no reason ...
19
votes
3
answers
21k
views
Sharing Cookie between different ports
I have an application1(C#) that is hosted on port:80 and application 2(nodejs) that is hosted on port:3030. Both are on localhost.
The request workflow is as following:
browsers sends request to ...
10
votes
3
answers
3k
views
Why isn't my "Set-Cookie" response header getting translated into an actual cookie?
I'm using Java 8, Wildfly 11, Spring 4 and Apache 2.4. I have this Java code that sets the session cookie
cookie = new Cookie(SESSION_ID_KEY, sessionId);
...
final String domain = request....
8
votes
1
answer
23k
views
Setting cookie for different domain from javascript
I am trying to set cookie to domain same as src of js file.
Scenario:
In www.xyz.com html, I have included js file from qwe.com as below
<script type="application/javascript" src="http://qwe....
6
votes
2
answers
5k
views
How browsers know what cookies to send to server when requesting?
I know how the cookies work, just started to dig why Codeigniter does not store generated csrf token in SESSION, it just store in cookie. Concerned about security, I'v started to think about php ...
8
votes
1
answer
5k
views
How To Authenticate Across Subdomains
I'm working on a web application which actually consists of two applications under the hood. One application is called account and handles all things related to user accounts such authentication, ...
1
vote
1
answer
6k
views
How do cookies work with domains, paths and overriding?
I have been reading through How do browser cookie domains work? and the RFC at and it answered many of my questions about cookies. Not all of them though (though I'm sure the answer is in the RFC, I ...
2
votes
1
answer
4k
views
Spring boot basic authentication spring boot session possible
I have a spring boot back-end server application that implements basic authentication over https. Will not have a traditional web based front end, rather my android and IOS clients will be using Rest ...
5
votes
1
answer
7k
views
why is XMLHttpRequest.withCredentials necessary even for same site Ajax requests
I am trying to implement an authentication service deployed in a different HTTP server from the one serving my login page.
The following diagram depicts my setup:
On step #1 my browser makes an HTTP ...
2
votes
1
answer
4k
views
Browser not saving cookie for explicit domain
On the server I'm using express.js and in the browser I'm using the fetch API. I send a cookie using the default domain and the browser sets it properly and sends it with subsequent requests. But ...
11
votes
2
answers
5k
views
cookie dupes to domain without dot prefix
I have this weird issue I cannot figure out, so I was hoping someone smarter than me could help!
I have a site https://example.com (no subdomain)
I have some code that sets a cookie, e.g.
var ...