'Can one subdomain set cookies for other subdomain?

  • I have spa.example.com, auth.example.com and api.example.com
  • spa makes ajax request (post) to auth

Can auth in response set cookie that will be sent to api when spa will make ajax request to api? If yes then how such cookie should look like in response from auth?

From what I tested: auth.example.com can set cookie only for auth.example.com OR .example.com (kind of wildcard). The former one will be sent along requests to auth.example.com and latter one to *.example.com.

It's strange that subdomain can set cookie for all sibling subdomains but not for single sibling subdomain...

cookies


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source

Related Questions