Hello Fabio,

Thanks for you reply, this must be considered on both sites or only in 
subdomain?

Thanks again!

Em quinta-feira, 8 de junho de 2023 às 16:14:37 UTC-3, Fabio C. Barrionuevo 
da Luz escreveu:

> Try to define the SESSION_COOKIE_DOMAIN on your settings.py
>
> SESSION_COOKIE_DOMAIN=".dominio.com.br"
>
> https://docs.djangoproject.com/en/4.2/ref/settings/#session-cookie-domain
>
> https://django.readthedocs.io/en/1.4.X/ref/settings.html#session-cookie-domain
>
> That said, Django 1.4.22 was released 8 years ago, and most likely, there 
> were a lot of fixes between Django 1.4 and 4.2 LTS, including several 
> security fixes for major flaws, so even if you manage to solve this 
> particular problem, perhaps you should consider starting planning to port 
> this system to newer versions of Python and Django.
>
> If you need help with this, Labcodes can help you in migrating and 
> structure your project to be more maintainable in the long term.
>
> You can contact us by *contact at labcodes.com.br 
> <http://labcodes.com.br>* and mention my name.
>
>
>
>
>
> Em qui., 8 de jun. de 2023 às 15:48, Rogerio Carrasqueira <
> [email protected]> escreveu:
>
>> Hello All!
>>
>> All good? I'm running an application in Django 1.4.22 and some days I'm 
>> facing some difficulties for my users to access the restricted area of my 
>> site. It so happens that I have the site running on the main domain 
>> www.dominio.com.br and the restricted area on app.dominio.com.br, both 
>> running on https, and so far everything is fine.
>>
>> When the user tries to access the restricted area thru the main domain, 
>> he enters the site www.dominio.com.br and clicks on a link that 
>> redirects to the restricted area in the subdomain app.dominio.com.br, 
>> but he cannot log in, he it puts the username and password and returns to 
>> the initial login page, and it does not authenticate.
>>
>> After some tests, I verified that if I go to Chrome's privacy settings, I 
>> can delete the cookie for the domain in question, after the removal of 
>> domain cookie information and if the user accesses directly via 
>> app.domain.com.br, without going through the main site www.dominio.com.br, 
>> can log in successfully. Now, if you go through the main site afterwards, 
>> you can no longer log in to the restricted area, you must delete the cookie 
>> again in the Google Chrome settings.
>>
>> In other browsers this problem does not happen, including in other 
>> browsers of the Chromiun family, such as Brave, Vivaldi and even 
>> Micro$oft's own.
>>
>> Has anyone gone through a similar problem?
>>
>> Awaiting help from a kind soul
>>
>> Cheers!
>>
>> Rogério Carrasqueira
>>
>>
>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "Django users" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to [email protected].
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/django-users/CACX1ULQ4kMb%2BfdrkfZg0KvBUyfha6zbNDU1u1Grg9cFP_gfR9g%40mail.gmail.com
>>  
>> <https://groups.google.com/d/msgid/django-users/CACX1ULQ4kMb%2BfdrkfZg0KvBUyfha6zbNDU1u1Grg9cFP_gfR9g%40mail.gmail.com?utm_medium=email&utm_source=footer>
>> .
>>
>
>
> -- 
> Fábio C. Barrionuevo da Luz
> Palmas - Tocantins - Brasil - América do Sul
>
> http://pythonclub.com.br/
>
> Blog colaborativo sobre Python e tecnologias Relacionadas, mantido 
> totalmente no https://github.com/pythonclub/pythonclub.github.io .
>
> Todos são livres para publicar. É só fazer fork, escrever sua postagem e 
> mandar o pull-request. Leia mais sobre como publicar em README.md e 
> contributing.md.
> Regra básica de postagem:
> "Você" acha interessante? É útil para "você"? Pode ser utilizado com 
> Python ou é útil para quem usa Python? Está esperando o que? Publica logo, 
> que estou louco para ler...
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/django-users/0cf132a5-79b6-45d9-84d5-d3bc2982cce9n%40googlegroups.com.

Reply via email to