When Discourse is hosted from a subfolder (e.g. /forum) it seems that the cookie is still set to the root folder /. To me this sounds like a potential security issue. For example, if a forum is hosted in /forum and a WordPress blog is hosted in /blog, the cookie with Discourse session is sent also …

[image] codinghorror: We are deferring on this for now. Running two instances of Discourse on the same domain in different subfolders is not a supported config at the moment. We may circle back to this in a few months, though. makes sense … being able to say 'No" creates a great product.

We will give another go at this soon.

Please close this issue. It works now. By setting the DISCOURSE_TOKEN_COOKIE env var. Thanks @Falco @neil Well done !!

As @vikaskedia mentioned earlier, there is a workaround. You can use a different cookie name for each subfolder by using DISCOURSE_TOKEN_COOKIE in your configuration. However, there is still a bug here where cookies are not properly restricted to paths on subfolder installs, causing conflicts with …

Can you scope how much work this would be, in terms of “T-shirt sizing”? Small, Medium, Large, XL, XXL?

Somewhere between small and medium. It would log everyone off though when “fixed / changed”

Hmm that is fairly traumatic. Is there any way to fix it so it only logs people out on subfolder setups at least?

Yes would only be for subfolder setups, also not sure what to do about leftover cookie

Were any of the recent subfolder changes helpful here on this front?

I don’t recall changing anything in this department recently.

Add path to cookie

Development

david (David Taylor) May 28, 2025, 11:03am 49

Understood. Thanks for posting here about it!

Are the forums public? Could you share some URLs?

Topic		Replies	Views
Serve Discourse from a subfolder (path prefix) instead of a subdomain Self-Hosting docker , subfolder , how-to , advanced-setup	30	43241	April 14, 2026
Setting the session token '_t' on the entire domain, not just my subdomain Development	6	5453	May 1, 2016
Address Bar changes under subfolder Support	1	467	June 28, 2020
Put discourse on a sub url Support	6	1429	August 7, 2020
Generals Subfolder recommendations and tips Self-hosting	9	2058	January 12, 2020

Add path to cookie

Related topics