Re: Dynamic SESSION_COOKIE_DOMAIN and CSRF_COOKIE_DOMAIN settings

2020-06-02 Thread Adam Johnson
You can already achieve what you're aiming to do in an outer middleware by mutating the cookie in response.cookies. The cookie object can have its domain changed before it is sent to the client: >>> from django.http import HttpResponse >>> resp = HttpResponse() >>> resp.set_cookie('foo', 'bar', do

Dynamic SESSION_COOKIE_DOMAIN and CSRF_COOKIE_DOMAIN settings

2020-06-02 Thread Kevin Grinberg
Hi folks, I recently ran into an issue around the SESSION_COOKIE_DOMAIN and CSRF_COOKIE_DOMAIN settings that seems like it could be fixable by adding some extensibility. Before submitting a patch/PR, I wanted to get the community's opinion on whether this is worth addressing in the framework,