Problem/Motivation

Currently, it is not possible to set additional options to drupalauth4ssp cookie (httponly, secure and domain).

Proposed resolution

The proposed solution is to get the options set in simplesamlphp config.php file.
Another solution would be getting the options from session_get_cookie_params(), but since we are dealing with saml cookies, maybe it is better to retrieve the configuration from simplesamlphp library. as the proposed solution says.

Remaining tasks

N/A

User interface changes

N/A

API changes

N/A

Data model changes

N/A

Support from Acquia helps fund testing for Drupal Acquia logo

Comments

rodrigoeg created an issue. See original summary.

rodrigoeg’s picture

Issue summary: View changes
Status: Active » Needs review
FileSize
1.96 KB
dakku’s picture

++

sjerdo’s picture

Combined the patches in this issue and #2996561: The cookie drupalauth4ssp is not being removed when the user logout, since the latter is regression of this issue.