Re: [Twisted-Python] twisted.web secured session cookies and multiple sites on same host

2014-01-28 Thread Adi Roiban
On 28 January 2014 21:06, Glyph Lefkowitz wrote: > > On Jan 26, 2014, at 2:13 AM, Adi Roiban wrote: > > Can this be done with current code? > > If not, I am happy to submit a ticket and a patch. > > > Even if it's currently *possible* to achieve, it seems to me that there > ought to be an easy w

Re: [Twisted-Python] twisted.web secured session cookies and multiple sites on same host

2014-01-28 Thread Glyph Lefkowitz
On Jan 26, 2014, at 2:13 AM, Adi Roiban wrote: > Can this be done with current code? > > If not, I am happy to submit a ticket and a patch. Even if it's currently possible to achieve, it seems to me that there ought to be an easy way to get this (much more secure) behavior by default. I'd a

[Twisted-Python] twisted.web secured session cookies and multiple sites on same host

2014-01-26 Thread Adi Roiban
Hi, I am looking for the followings: * Force twisted.web to set session cookie as secured when HTTPS is used. * Allow 2 separate twisted.web Sites to run on same host/IP but with different sessions. I have checked the current code for getSession() [1] but i can see that session cookie is harcoded