= Share Trac cookies between projects in the same directory

== Description

This plugin allows cookies to be shared among Trac environments that reside in the same directory, enabling Single-Sign-On to a collection of Trac sites.

**Note**: This plugin inspired a native Single-Sign-On functionality in AccountManagerPlugin, which is available since acct_mgr-0.4 and even solves some of the shortcomings of this plugin. Most importantly login/logout works from any Trac environment sharing identical cookie path settings.

== Bugs/Feature Requests

Existing bugs and feature requests for SharedCookieAuthPlugin are 
[report:9?COMPONENT=SharedCookieAuthPlugin here].

If you have any issues, create a 
[/newticket?component=SharedCookieAuthPlugin new ticket].

[[TicketQuery(component=SharedCookieAuthPlugin&group=type,format=progress)]]

== Download

Download the zipped source from [export:sharedcookieauthplugin here].

== Source

You can check out SharedCookieAuthPlugin from [/svn/sharedcookieauthplugin here] using Subversion, or [source:sharedcookieauthplugin browse the source] with Trac.

== Installation

Install the plugin to multiple Trac environments that use cookie-based auth and reside in the same directory.

== Configuration

You will need to select one of the project to be the master, and thus responsible for authentication. The other (slave) projects should be configured to pass the authenticate request onto the master project. This is to avoid Trac expiring the `auth_cookie` when the login is made in another project. Unfortunately this means that login and logout can only be made in the master project.

The slave project will have `LoginModule` disabled and `sharedcookieauth` enabled:
{{{#!ini
[components]
sharedcookieauth.* = enabled
trac.web.auth.LoginModule = disabled

[trac]
auth_cookie_path = /
}}}

The master project will have both `LoginModule` and `sharedcookieauth` enabled:
{{{#!ini
[components]
sharedcookieauth.* = enabled
trac.web.auth.LoginModule = enabled

[trac]
auth_cookie_path = /
}}}

In practice `sharedcookieauth` does not need to be enabled in the master project, but neither should it cause any harm. Also be aware that the server name must match for each project or the browser will not share the `auth_cookie` among projects.

== Recent Changes

[[ChangeLog(sharedcookieauthplugin, 3)]]

== Author/Contributors

''Originally developed at [http://openplans.org The Open Planning Project]''

'''Author:''' [wiki:k0s] [[BR]]
'''Maintainer:''' [[Maintainer]] [[BR]]
'''Contributors:''' rjollos