2

I am running a Nginx server and tried to hide the 'Set-Cookie' parameter from the HTTP header output when using curl -I hostname.com - I applied the Nginx configuration using:

proxy_hide_header Set-Cookie;

Using this worked as intended - until I noticed that any request to login to the control panel simply resulted in reloading the admin login page.

Is there a way to change or hide this that still allows users to login to the control panel?

Improve this question
1

I'm not sure I'm understanding 100% what you're trying to do, but by preventing the Set-Cookie header, aren't you essentially blocking any cookies from being set in your browser?

All of Craft's authentication is cookie based, so it's not surprising that trying to login to the control panel doesn't work.

Improve this answer
2
  • That should have said "change" I will update it. I want to change the name so maybe it's "myAppSessionId"..
    – Jason McCallister
    Jul 31 '14 at 4:31
  • Figured as much... that's currently not possible without a hack, but just trying to understand how changing that would help your situation.
    – Brad Bell
    Jul 31 '14 at 4:48

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.