When Discourse is hosted from a subfolder (e.g. /forum) it seems that the cookie is still set to the root folder /. To me this sounds like a potential security issue. For example, if a forum is hosted in /forum and a WordPress blog is hosted in /blog, the cookie with Discourse session is sent also …

I tested the change and it’s safe. Sessions aren’t invalidated. I committed the change today. [afbeelding] rap1ds: There’s no need for different subdomain if the cookies are scoped by the path. Or are there any other reasons why one couldn’t host two Discourse instances from different folders? …

@neil [afbeelding] neil: Serving multiple Discourse instances from different paths on the same domain will most likely work now I have 2 discourse setups. setup 1 running from www.site.com/d1/ setup 2 running from www.site.com/d2/ Problems noticed I cannot remain logged into both the dis…

Yeah we have a bug here: lib/auth/default_current_user_provider.rb main # possible we have an api call, impersonate if api_key current_user = lookup_api_user(api_key, request) if !current_user raise Dis…

@neil let me know once you commit the fix .. I can check it out if it works ..

@vikaskedia I pushed a fix so please try it out.

Ok I am following the steps here to upgrade: [afbeelding] Manually update Discourse and Docker image to latest Self-Hosting bookmark This guide provides step-by-step instructions for manually updating Discourse, the Docker container, and the Ubuntu operating s…

@neil damm man .. it works !! I am successfully logged into www.site.com/d1/ and www.site.com/d2/ Very good .. :penguin:

@neil I just started getting “internal server error 500” can this be related to the above fix … [afbeelding] The error auto corrects itself in a couple of minutes. So it seems to indicate it is the “rate limiting” issue. But this is just me using the site and its a beefy server … and i am seein…

Looks like your subfolder is missing? “/subfolder/faq”

[afbeelding] neil: Looks like your subfolder is missing? “/subfolder/faq” If the subfolder was missing the error will come all the time. This error is a transient error ..

Add path to cookie

Ontwikkelaar

vikaskedia (Vikas Kedia) 20 juni 2017 om 17:49 11

Ok I am following the steps here to upgrade:

and will let you know soon

Topic		Antwoorden	Weergaven
Serve Discourse from a subfolder (path prefix) instead of a subdomain Self-Hosting docker , subfolder , how-to , advanced-setup	30	43454	14 april 2026
Setting the session token '_t' on the entire domain, not just my subdomain Development	6	5491	1 mei 2016
Address Bar changes under subfolder Support	1	471	28 juni 2020
Put discourse on a sub url Support	5	1452	8 juli 2020
Generals Subfolder recommendations and tips Self-hosting	8	2082	1 november 2016

Add path to cookie

Gerelateerde topics