Allow setting the domain of the cookie to change its scope
I'm working on a project that has subdomains. I'd like to have the auth cookie be acessible by the parent domain as well as all subdomains.
In order for this to be possible, the cookie domain needs to be set with a preceeding dot in order to scope it to include sub domains.
For example, currently the cookie is always scope to the parent domain: example.com but I would like to be able to scope it to all subdomains instead by setting the cookie domain to: .example.com
H3 is responsible for the session and cookie. You might be able to configure the cookie options like this:
export default defineNuxtConfig({
runtimeConfig: {
session: {
{
cookie: {
domain: '.example.com'
}
}
}
}
})
See also: https://h3.unjs.io/examples/handle-cookie https://github.com/unjs/h3/blob/c04c458810e34eb15c1647e1369e7d7ef19f567d/src/utils/session.ts#L38
Thanks for the suggestion, but I believe the domain property also needs to be supported in this module as well so the configuration can be passed it:
Its true, that I should be able to pass in the domain to h3 cookie, tghough
I just tested it and seems to work. After running the red squiggle was gone for some reason.
Edit:
You should also be able to use ENV variable.