Not sure what this has to do with app engine (or any other server-side
system) -- it appears to be entirely a client-side (browser) problem. Maybe
http://stackoverflow.com/questions/2870371/why-is-jquerys-ajax-method-not-sending-my-session-cookie
can help (the second answer, not the accepted one).


Alex


On Thu, Jul 16, 2015 at 12:34 AM, Azher Uddin Farooqi <[email protected]
> wrote:

> Hello,
>
> I've recently noticed that certain (all?) browsers do not send cookies
> with OPTIONS requests, but session (understandably) sends a cookie response
> with a new session ID in response to these. (OPTIONS requests are used to
> probe CORS access control headers prior to sending AJAX requests.)
>
>
> My specific scenario is the following:
>
>    1. request  https://my-domain.appspot.com
>       - a. Receive cookie with new session ID
>       2. AJAX OPTIONS request to https://my-domain.appspot.com to probe
>    for CORS headers (this is automatically generated by the browser)
>       - a. Browser does not send cookie
>       - b. Session responds with Set-Cookie header and NEW session ID
>       3. Subsequent requests to https://my-domain.appspot.com use
>    different session ID
>    4. Because of session ID mismatch, CORS filter blocks the requests.
>
> What can I do to prevent new session ID getting created in step #2 ? Or
> how can I avoid my requests getting failed in the above scenario ?
>
>
> Thanks,
> Azher
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google App Engine" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at http://groups.google.com/group/google-appengine.
> To view this discussion on the web visit
> https://groups.google.com/d/msgid/google-appengine/f9f03fbb-2eaf-41ed-8d64-54c9f0854633%40googlegroups.com
> <https://groups.google.com/d/msgid/google-appengine/f9f03fbb-2eaf-41ed-8d64-54c9f0854633%40googlegroups.com?utm_medium=email&utm_source=footer>
> .
> For more options, visit https://groups.google.com/d/optout.
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-appengine.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/google-appengine/CAE46Be-0ry00QhYLN05%3DYtb2qNz5o3VGyb6paVhTuLPrwO5BGA%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to