Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Uniquely name coder cookies that get stripped for applications #3751

Closed
@Emyrk

Description

@Emyrk

Our cookie is named session_token which is quite generic. We strip this when forwarding application traffic, meaning any application hosted cannot use this cookie. I suggest we prefix all our cookies with coder_ to deconflict anything in future.

Cookie names:

coder/codersdk/client.go

Lines 23 to 25 in 3e30cdd

SessionTokenKey = "session_token"
OAuth2StateKey = "oauth_state"
OAuth2RedirectKey = "oauth_redirect"

Cookie Strip:

r.Header.Add("Cookie", httpapi.StripCoderCookies(cookieHeader))

Metadata

Metadata

Assignees

No one assigned

    Labels

    apiArea: HTTP API

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions