Is it possible to set an auth cookie that would be valid on:
Or will each subdomain always require it's own cookie?
Please everyone note that you can set a cookie from a subdomain on a domain. But you CAN'T set a cookie from a domain on a subdomain.
Seems to have worked, so ASP.NET session cookies on different subdomains still count as first party. A cookie set on a website that is loaded in an iframe of a different website is considered to be a third party cookie to the parent website.
The concept of site is more difficult to apprehend than meets the eye. Some requests are cross-origin but same-site. SameSite only has effects on cross-site requests. SameSite paints a target on your subdomains' back.
You cannot set cookies for another domain.
You can use cookies across sub domains if you specify the cookie to be attached to the domain:
.domain.com
note the dot in front.
See here for reference:
http://www.jotlab.com/2008/04/08/howto-get-cookies-across-subdomains-php/
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With