Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Treat frontend_cid cookie like frontend with vcl_fix #1360

Open
wants to merge 1 commit into
base: devel
Choose a base branch
from

Conversation

rbrown
Copy link
Contributor

@rbrown rbrown commented Feb 15, 2017

There are various issues / stack exchange posts about "add to basket"
buttons not working the first time someone presses them when using the vcl_fix
method and running with an https insecure_base_url via say
nginx:443->varnish->nginx.

These issues are happening because magento is sending a second
cookie, frontend_cid, under this configuration. The value of
frontend_cid is kept in $_SESSION and the cookie is validated when the
session is started.

This patch adds the frontend_cid cookie to hash_data on esi private
access the same as frontend cookie and appears to work.

NOTES:

  • I haven't worried about the case when not using vcl_fix
  • X-Varnish-Set-Cookie shows frontend_cid for me, as beresp only sends one cookie

There are various issues / stack exchange posts about "add to basket"
buttons not working the first time someone presses them when using the vcl_fix
method and running with an https insecure_base_url via say
nginx:443->varnish->nginx.

These issues are happening because magento is sending a second
cookie, frontend_cid, under this configuration. The value of
frontend_cid is kept in $_SESSION and the cookie is validated when the
session is started.

This patch adds the frontend_cid cookie to hash_data on esi private
access the same as frontend cookie and appears to work.

NOTES:
- I haven't worried about the case when not using vcl_fix
- X-Varnish-Set-Cookie shows frontend_cid for me, as beresp only sends one cookie
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants