Zend Framework Zend_auth sessions getting mixed up

Question

I've two subdomains. Each subdomain has its own authenticated users database. I'm using

$auth = Zend_Auth::getInstance();
if($auth->hasIdentity()){ }

to check user login credentials. It works prefectly for each individual subdomain. But when I log into one subdomain and try to access 'restricted' page in another subdomain without logging out from first subdomain, it takes me thru. Basically 'auth' session of first subdomain returns true in '$auth->hasIdentity()' for second subdomain. How can I solve this?

EDIT: Probably using different auth session names might solve it but since I'm sharing the code between these 2 subdomains, this is not feasible option.

SMka SMka · Accepted Answer · 2009-12-23T08:04:50

do somewhere at top of your Bootstrap

protected function _initModifiedSession()
{
    if ($this->hasPluginResource('session'))
    {
        $resourcesOptions = $this->getOption('resources');
        $resourcesOptions['resources']['session']['cookie_domain'] = $_SERVER['HTTP_HOST'];
        $this->setOptions($resourcesOptions);
        $this->bootstrap('session');
    }
}

UPDATE1
without Zend_Application

    $sessionOptions = array(
        'cookie_domain' => $_SERVER['HTTP_HOST']
    );
    Zend_Session::setOptions($sessionOptions);

Zend Framework Zend_auth sessions getting mixed up

2 Answers