Ticket #4724: session_cookie_path.2.patch

django/conf/global_settings.py

@@ -273 +273 @@
 SESSION_COOKIE_NAME = 'sessionid'         # Cookie name. This can be whatever you want.
 SESSION_COOKIE_AGE = 60 * 60 * 24 * 7 * 2 # Age of cookie, in seconds (default: 2 weeks).
 SESSION_COOKIE_DOMAIN = None              # A string like ".lawrence.com", or None for standard domain cookie.
+SESSION_COOKIE_PATH = '/'                 # A string "/shop". Only use if you host two different djang instances on the same domain
 SESSION_COOKIE_SECURE = False             # Whether the session cookie should be secure (https:// only).
 SESSION_SAVE_EVERY_REQUEST = False        # Whether to save the session data on every request.
 SESSION_EXPIRE_AT_BROWSER_CLOSE = False   # Whether sessions expire when a user closes his browser.

django/contrib/sessions/middleware.py

@@ -109 +109 @@
                     datetime.datetime.now() + datetime.timedelta(seconds=settings.SESSION_COOKIE_AGE))
                 response.set_cookie(settings.SESSION_COOKIE_NAME, session_key,
                     max_age=max_age, expires=expires, domain=settings.SESSION_COOKIE_DOMAIN,
+                    path=settings.SESSION_COOKIE_PATH,
                     secure=settings.SESSION_COOKIE_SECURE or None)
         return response

docs/settings.txt

@@ -752 +752 @@
 The name of the cookie to use for sessions. This can be whatever you want.
 See the `session docs`_.
 
+SESSION_COOKIE_PATH
+-------------------
+
+Default: ``'/'``
+
+The path set for the cookie. This is usefull if you have multiple Django instances, that 
+are running at different URL mount points within the same virtual host.
+
 SESSION_COOKIE_SECURE
 ---------------------