613574 - Need a handler for the Django session cookie - logged-in state not reflected on SAMO

Status: VERIFIED WORKSFORME

(addons.mozilla.org Graveyard :: Public Pages, defect, P3)

Description

[Stephen Donner [:stephend] Not actively reading bugmail]

Spun off from bug 600372, the logged-in state is reflected when logging in to prod and loading, say https://addons.mozilla.org/en-US/firefox/discovery/3.7pre/Darwin, but not from SAMO: https://services.addons.mozilla.org/en-US/firefox/discovery/3.7pre/Darwin.

Jeff notes that we're sending the sessionid cookie right, but we don't yet have a handler for the django session cookie.

Comment 1

[Wil Clouser [:clouserw]]

Not sure what this means

Comment 2

[Jeff Balogh (:jbalogh)]

Our AuthenticationBackends look for the AMOv3 cookie to propagate remora sessions. But there's no AMOv3 cookie on samo since the cookie domain is not correct, so only the Django sessionid cookie is available.  We have nothing to pick up sessionid so we treat the user as anonymous.

Comment 3

[Jeff Balogh (:jbalogh)]

http://grab.by/7FWR

Comment 4

[Stephen Donner [:stephend] Not actively reading bugmail]

I see the same as you, Jeff; dunno what happened, but hey; fixed.

Verified WFM.