Persist session across subdomain about multi-tenant

[luceos]

So the use case is you create a user for a newly created tenant website. A good solution would be to create a one time token that the identifies the user on the newly created Tenant website. Simply setting the session domain to allow for any subdomain will only solve this issue in the case of a subdomain set up.

[yientau]

Yes, that's right. After a new user was created, I will login the user with

Auth::login($user);

Then a redirection to the user corresponding subdomain site. I am not sure if this will cause any security concern though.

return redirect()->intended("http://" . $tenant_hostname . "/home");

[luceos]

That's fine for the single use case of working with subdomains. In any other case attempting to save a cookie/session for another domain has no effect.

[luceos]

not going to do this, will consider some solution with the authentication feature for 3.x