Toolbar.module setting cookies for unauthenticated users [#1127232]

Hi,

Is there any good reason that toolbar.module is setting cookies for unauthenticaed users? As this is just a feature shipped for authenticated users it feels a little redundant. The reason I'm askin/filing a bug report, is that this destroy some of the logic with most reverse caching proxies. It is easily fixable in both Drupal (disable the module) or in the reverse proxy (unsetting the cookie), but I'd just like to shed some light on the problem.

Comments

Comment #1

crifi CreditAttribution: crifi commented 14 April 2011 at 23:35

Version:	7.0	» 8.x-dev
Category:	bug	» feature
Status:	Needs review	» Active

This needs no review. In my opinion this is not directly a bug. It's a kind of change request for D8.

Comment #2

vegardx CreditAttribution: vegardx commented 15 April 2011 at 14:47

I agree with you, and would also like to extend the feature request. A lot of modules keep setting cookies, and unless you inspect the code or headers, they can be difficult to spot. A status page where all cookies being set by various modules would solve this, more or less, as you'd then be able to easily track and unset cookies that are causing problems.

Comment #3

cweagans

He/Him

English

Boise, ID, USA

CreditAttribution: cweagans commented 12 October 2011 at 17:40

Category:	feature	» bug
Priority:	Minor	» Normal

This is a bug. Toolbar shouldn't be setting cookies. Let's try to find a way around it.

Comment #4

bcobin CreditAttribution: bcobin commented 26 February 2012 at 14:17

I suspect this is stopping Varnish (which won't run if cookies are set for anonymous users) - I'm using Open Public and Toolbar is required for certain features, so I can't easily disable the module. Is there another way around this? I see "unsetting the cookie" as an option - how would I do this?

Thank you for any help...

Comment #5

cweagans

He/Him

English

Boise, ID, USA

CreditAttribution: cweagans commented 26 February 2012 at 22:34

You can fix it in your Varnish VCL. There's usually a place where the VCL ignores google analytics cookies and the like, so you can add the toolbar cookie to that place in your varnish vcl.

Comment #6

bcobin CreditAttribution: bcobin commented 26 February 2012 at 22:36

Thanks, cwegans - working with my hosting company and I think they've figured that one out, actually. It's a matter of finding the offending culprit now.

Thanks for the quick response - much appreciated!