Hi there,
this question isn't bound to Django Web Framework as the major
limitation are cookies:

I have single instance Django site running on multiple domains. Each
domain simply filters specific categories. There's an eshop and I need
to share sessions among all domains so user can log in on one site and
stay logged while browsing other domains.

As I said before, the major limitation is how cookies work -- they're
bound to single domain or many subdomains.


I saw one solution -- on every page request send many GET requests to all
domains, giving them session_id, eg:

http://domain/sess/<session_id>

Each domain then receives session_id and save it to cookie. When user
browse through site and switches to other domains, he remains logged in
as the session_id is the same.

This works but I'm concerned with security issues. Also I don't like
30+ requests on every refresh (it could be probably limitet only to
login/logout views).


What's you opinion? Have you ever dealt with problem like this? How
have you solved it?



S pozdravem
  Tomáš Ehrlich

Email:  tomas.ehrl...@gmail.com
Tel:    +420 608 219 889
Jabber: elv...@jabber.cz

"Půjdu kamkoliv, pokud je to kupředu." - D. Livingstone

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to django-users+unsubscr...@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at http://groups.google.com/group/django-users?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to