Two or more instances on the same host with different ports overwrite the cookies for each other

[foosel]

Problem

If two or more OctoPrint instances are accessed via the same host (domain, ip, ...) but different ports, since cookies are not port specific one instance will happily overwrite the session cookie of the others. Also see this discussion in the G+ community.

The same issue also exists if two or more OctoPrint instances are accessed via different sub paths from the same reverse proxy, since the session cookies are set for the / path and do not take configured script roots into account.

Solution

1. Postfix cookies that are set on the responses with a port specific suffix and strip said suffix from cookies read from the request transparently for the underlying code.
2. Make sure that the configured script root is prepended to the cookie path on set cookies.

Already implemented in 9d9eb33, ticket created for documentation purposes.

[foosel]

Fixed in 1.2.16 which was released yesterday. Also fixed on devel.