Sharing a session between Ruby and PHP

Question

Is it possible to share a session between my PHP app on a subdomain and my Ruby apps on my other subdomains?

I don\'t really know where to take it from here. I know

Answer 1

This could be solved with apps sharing the same database and with a little help of cookies.

• Session opened in php
  • Create a cookie with random string in it
  • Save the string in database with user credentials and timestamp
• Session forwarded to rails
  • Check if the cookie exists
  • Search the string in cookie form the database
  • If match is found, then session is accepted and the same user credentials could be used

It would be wise to store some kind of unique information of the workstation or the browser, so that stealing the session, with copying the cookie wont work.

Answer 2

If you want to share sessions in that manner (accross PHP/Java/Ruby/etc), you need to save sessions (and access them) from a Database.

See: http://php.net/manual/en/function.session-set-save-handler.php

And you would need an identical approach in Ruby.

To share cookies across domains, you also need to change the PHP session configuration option for session.cookie_domain from the default of "" (which inserts your domain name) to: ".yourhost.com" (note the prefixed period).