如何在同一个子域上获取不同的Django应用程序来共享会话cookie？ [英] How to get distinct Django apps on same subdomain to share session cookie?

问题描述

我们在同一个子域上部署了几个Django应用程序。少数高级用户需要在这些应用程序之间跳转。我注意到，每次他们在应用程序之间反弹，他们的会话cookie从Django收到一个新的会话ID。

We have a couple of Django applications deployed on the same subdomain. A few power users need to jump between these applications. I noticed that each time they bounce between applications their session cookie receives a new session ID from Django.

除了在一个复杂的工作流程中，我不使用Django会话表。如果用户在应用程序之间反弹，而在此工作流程中，他们会失去会话并重新开始。

I don't use the Django session table much except in one complex workflow. If the user bounces between applications while in this workflow they lose their session and have to start over.

我挖掘了Django会话代码，发现：

I dug through the Django session code and discovered that the:

django.conf.settings.SECRET_KEY

django.conf.settings.SECRET_KEY

用于对每个请求的会话执行完整性检查。如果完整性检查失败，则会创建一个新会话。意识到这一点，我改变了每个应用程序的密钥使用相同的值，认为这将允许完整性检查通过，并允许他们共享Django会话。然而，它似乎没有工作。

is used to perform an integrity check on the sessions on each request. If the integrity check fails, a new session is created. Realizing this, I changed the secret key in each of these applications to use the same value, thinking this would allow the integrity check to pass and allow them to share Django sessions. However, it didn't seem to work.

有办法吗？

提前感谢

推荐答案

会建议您将 SESSION_COOKIE_NAME 设置为两个应用程序的不同值。您的用户最初仍需要登录两次，但他们的会话不会冲突 - 如果他们登录到应用A，然后应用B，然后返回到A，他们仍然有他们的A会话。

I would instead advise you to set SESSION_COOKIE_NAME to different values for the two apps. Your users will still have to log in twice initially, but their sessions won't conflict - if they log in to app A, then app B, and return to A, they'll still have their A session.

在Django实例之间共享会话可能不是一个好主意。如果你想要某种单点登录，看看像django-cas。您仍然有2个会话（如您所愿），但用户只会登录一次。

Sharing sessions between Django instances is probably not a good idea. If you want some kind of single-sign-on, look into something like django-cas. You'll still have 2 sessions (as you should), but the user will only log in once.

这篇关于如何在同一个子域上获取不同的Django应用程序来共享会话cookie？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！