BBlack has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/231558

Change subject: wikidata.org cookie workaround: add comments re task and when 
it can be removed
......................................................................

wikidata.org cookie workaround: add comments re task and when it can be removed

Bug: T109038
Change-Id: Ic243cc5afd164cf7b62b1f649c0ad6c40e27c312
---
M templates/varnish/text-frontend.inc.vcl.erb
1 file changed, 2 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/58/231558/1

diff --git a/templates/varnish/text-frontend.inc.vcl.erb 
b/templates/varnish/text-frontend.inc.vcl.erb
index 3d7fc0d..fddf032 100644
--- a/templates/varnish/text-frontend.inc.vcl.erb
+++ b/templates/varnish/text-frontend.inc.vcl.erb
@@ -221,6 +221,8 @@
 
        call analytics_last_access_deliver;
 
+       // This is a temporary hack to work around issues from T109038
+       // We should be able to remove this sometime after Sept 16, 2015, as 
the old CA cookies should have 30d expiry.
        // For any request Host ending in "wikidata.org", if we see a 
double-value for the CA token, try to delete the one at .wikidata.org.
        if(req.http.Host ~ "(?i)(^|\.)wikidata\.org$" && req.http.Cookie ~ 
"centralauth_Token.*centralauth_Token") {
                // The exact format of the cookie-delete string is copied from 
examples of normal CA cookie deletes (e.g. for logouts?) seen in traffic logs

-- 
To view, visit https://gerrit.wikimedia.org/r/231558
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic243cc5afd164cf7b62b1f649c0ad6c40e27c312
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: BBlack <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to