跨子域Cookie

Question

我正试图在子域中携带我的cookie，但我似乎无法携带它。我希望域中的域名为.apus.edu，但cookie是catalog.apus.edu，amu.apus.edu或apu.apus.edu

这是我的首页。您将被分配一个默认cookie http://catalog.apus.edu/sitecat/cookie.htm

当您点击AMU时，您将被分配AMU Cookie等

当你到达控制页面时，你应该有AMU或APU，否则我会为你指定默认值。

我真的希望域名为.apus.edu，而不是每个子域名。

function Set_Cookie( name, value, expires, path, domain, secure ) {
    // set time, it's in milliseconds
    var today = new Date();
    today.setTime( today.getTime() );

    /*
    if the expires variable is set, make the correct
    expires time, the current script below will set
    it for x number of days, to make it for hours,
    delete * 24, for minutes, delete * 60 * 24
    */
    if ( expires ) { expires = expires * 1000 * 60 * 60 * 24; }
    var expires_date = new Date( today.getTime() + (expires) );

    document.cookie = name + "=" +escape( value ) +
    ( ( expires ) ? ";expires=" + expires_date.toGMTString() : "" ) +
    ( ( path ) ? ";path=" + path : "" ) +
    ( ( domain ) ? ";domain=" + domain : "" ) +
    ( ( secure ) ? ";secure" : "" );
}

function Get_Cookie( check_name ) {
    // first we'll split this cookie up into name/value pairs
    // note: document.cookie only returns name=value, not the other components
    var a_all_cookies = document.cookie.split( ';' );
    var a_temp_cookie = '';
    var cookie_name = '';
    var cookie_value = '';
    var b_cookie_found = false; // set boolean t/f default f

    for ( i = 0; i < a_all_cookies.length; i++ ) {
        // now we'll split apart each name=value pair
        a_temp_cookie = a_all_cookies[i].split( '=' );

        // and trim left/right whitespace while we're at it
        cookie_name = a_temp_cookie[0].replace(/^\s+|\s+$/g, '');

        // if the extracted name matches passed check_name
        if ( cookie_name == check_name ) {
            b_cookie_found = true;
            // we need to handle case where cookie has no value but exists (no = sign, that is):
            if ( a_temp_cookie.length > 1 ) {
                cookie_value = unescape( a_temp_cookie[1].replace(/^\s+|\s+$/g, '') );
            }
            // note that in cases where cookie is initialized but no value, null is returned
            return cookie_value;
            break;
        }
        a_temp_cookie = null;
        cookie_name = '';
    }
    if ( !b_cookie_found ) {
        return null;
    }
}

// this deletes the cookie when called
function Delete_Cookie( name, path, domain ) {
    if ( Get_Cookie( name ) ) document.cookie = name + "=" +
    ( ( path ) ? ";path=" + path : "") +
    ( ( domain ) ? ";domain=" + domain : "" ) +
    ";expires=Thu, 01-Jan-1970 00:00:01 GMT";
}

var CookieNameDefault = 'Default Cookie';
var CookieValueDefault = 'Default Cookie';

var CookieNameAMU = 'AMU Cookie';
var CookieValueAMU = 'AMU Cookie';

var CookieNameAPU = 'APU Cookie';
var CookieValueAPU = 'APU Cookie';

var cAMU = Get_Cookie(CookieNameAMU); 
var cAPU = Get_Cookie(CookieNameAPU); 

if (window.location.href.indexOf("www.amu.apus.edu/_test/sitecat/cookie.htm") >= 0) { //delete APU & Default cookie and set AMU cookie
    Delete_Cookie(CookieNameAPU, '/', '');
    Delete_Cookie(CookieNameDefault, '/', '');
    Set_Cookie(CookieNameAMU, CookieValueAMU, '', '/', '', '');
    alert(CookieNameAMU);
}

if (window.location.href.indexOf("www.apu.apus.edu/_test/sitecat/cookie.htm") >= 0) { //delete AMU & Default cookie and set APU cookie
    Delete_Cookie(CookieNameAMU, '/', '');
    Delete_Cookie(CookieNameDefault, '/', '');
    Set_Cookie(CookieNameAPU, CookieValueAPU, '', '/', '', '');
    alert(CookieNameAPU);
}

if (cAMU || cAPU) { 
    // check if you have any of these two cookies if so then do nothing
}
else { // if you don't have any cookie then lets give you the default cookie
    Set_Cookie( CookieNameDefault, CookieValueDefault, '', '/', '', '' ); 
    alert(CookieNameDefault);
}

Answer 1

好吧，我不是百分之百地确定那个巨大的代码块中发生了什么。但是，如果您将Cookie域设置为.apus.edu，则*.apus.edu可以使用该域。

即。你在哪里：

Set_Cookie(CookieNameAMU, CookieValueAMU, '', '/', '', '');

应该是

Set_Cookie(CookieNameAMU, CookieValueAMU, '', '/', '.apus.edu', '');

Answer 2

您应该指明可以阅读此Cookie的更高域名 如果设置catalog.apus.edu，则可以通过subdomain.catalog.apus.edu访问它，但不能通过apus.edu和other.apus.edu访问

所以，您必须将域设置为apus.edu，因此可以通过apus.edu，www.apus.edu，anysubdomain.apus.edu访问，...

Set_Cookie(CookieNameAMU, CookieValueAMU, '', '/', 'apus.edu' , '');