When Discourse is hosted from a subfolder (e.g. /forum) it seems that the cookie is still set to the root folder /. To me this sounds like a potential security issue. For example, if a forum is hosted in /forum and a WordPress blog is hosted in /blog, the cookie with Discourse session is sent also …

[изображение] codinghorror: We are deferring on this for now. Running two instances of Discourse on the same domain in different subfolders is not a supported config at the moment. We may circle back to this in a few months, though. makes sense … being able to say 'No" creates a great product…

We will give another go at this soon.

Please close this issue. It works now. By setting the DISCOURSE_TOKEN_COOKIE env var. Thanks @Falco @neil Well done !!

As @vikaskedia mentioned earlier, there is a workaround. You can use a different cookie name for each subfolder by using DISCOURSE_TOKEN_COOKIE in your configuration. However, there is still a bug here where cookies are not properly restricted to paths on subfolder installs, causing conflicts with …

Can you scope how much work this would be, in terms of “T-shirt sizing”? Small, Medium, Large, XL, XXL?

Somewhere between small and medium. It would log everyone off though when “fixed / changed”

Hmm that is fairly traumatic. Is there any way to fix it so it only logs people out on subfolder setups at least?

Yes would only be for subfolder setups, also not sure what to do about leftover cookie

Were any of the recent subfolder changes helpful here on this front?

I don’t recall changing anything in this department recently.

Add path to cookie

Разработка

david (David Taylor) 28.Май.2025 11:03:20 49

Понял. Спасибо, что поделились этим здесь!

Форумы являются публичными? Можете ли вы поделиться несколькими ссылками?

Тема		Ответов	Просм.
Serve Discourse from a subfolder (path prefix) instead of a subdomain Self-Hosting docker , subfolder , how-to , advanced-setup	30	43331	14.04.2026
Setting the session token '_t' on the entire domain, not just my subdomain Development	6	5474	01.05.2016
Address Bar changes under subfolder Support	1	471	28.06.2020
Put discourse on a sub url Support	6	1446	07.08.2020
Generals Subfolder recommendations and tips Self-hosting	9	2063	12.01.2020

Add path to cookie

Связанные темы