When Discourse is hosted from a subfolder (e.g. /forum) it seems that the cookie is still set to the root folder /. To me this sounds like a potential security issue. For example, if a forum is hosted in /forum and a WordPress blog is hosted in /blog, the cookie with Discourse session is sent also …

[이미지] codinghorror: We are deferring on this for now. Running two instances of Discourse on the same domain in different subfolders is not a supported config at the moment. We may circle back to this in a few months, though. makes sense .. being able to say 'No" creates a great product.

We will give another go at this soon.

Please close this issue. It works now. By setting the DISCOURSE_TOKEN_COOKIE env var. Thanks @Falco @neil Well done !!

As @vikaskedia mentioned earlier, there is a workaround. You can use a different cookie name for each subfolder by using DISCOURSE_TOKEN_COOKIE in your configuration. However, there is still a bug here where cookies are not properly restricted to paths on subfolder installs, causing conflicts with …

Can you scope how much work this would be, in terms of “T-shirt sizing”? Small, Medium, Large, XL, XXL?

Somewhere between small and medium. It would log everyone off though when “fixed / changed”

Hmm that is fairly traumatic. Is there any way to fix it so it only logs people out on subfolder setups at least?

Yes would only be for subfolder setups, also not sure what to do about leftover cookie

Were any of the recent subfolder changes helpful here on this front?

I don’t recall changing anything in this department recently.

Add path to cookie

개발

david (David Taylor) 5월 28, 2025, 11:03오전 49

알겠습니다. 여기에 게시해 주셔서 감사합니다!

포럼이 공개되어 있나요? URL을 공유해 주실 수 있을까요?

글		댓글	조회수
Serve Discourse from a subfolder (path prefix) instead of a subdomain Self-Hosting docker , subfolder , how-to , advanced-setup	30	44611	4월 14, 2026
Setting the session token '_t' on the entire domain, not just my subdomain Development	6	5582	5월 1, 2016
Address Bar changes under subfolder Product Support	1	515	6월 28, 2020
Put discourse on a sub url Product Support	5	1537	7월 8, 2020
Generals Subfolder recommendations and tips Self-hosting	8	2214	11월 1, 2016

Add path to cookie

Related topics