I have 2 applications: init and myapp init is served over www.domain.com/init/..
myapp is served over https://my.domain.com/myapp/... Since both applications have the same menu they need to share the session, so I choose one of them as a "master". init contains the following code in a model file: session.connect(request, response, masterapp="myleonexus") # by default the session cookie will not be shared across subdomains response.cookies[response.session_id_name]['domain'] = '.leonexus.nl' myapp contains the following code in a model file: response.cookies[response.session_id_name]['domain'] = '.leonexus.nl' session.secure() The problem is that when a user is logged into myapp to manage content and clicks the preview button: onclick="javascript:openwindow(http://www.domain.com/init/default/router/6)" the user is being logged out when he returns to the window which serves the myapp requests. When I comment out session.secure() in myapp the problem does not occur. Is there a way to open the preview without sharing the session? I cannot use session.forget() because the preview stores variables in session. Kind regards, Annet -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to web2py+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.