Response and request objects don't use the same session

+1 Works for me.

This should be for the 2.3 milestone.

Thanks Josh.

This is truly a new era in rails. I've never had a patch applied so quickly.

Thanks again.

Just curious, but does this patch happen to fix a bug I noticed last night on the 2.3 tag when using Mongrel where I'd use the cookie store, change the session, and it wouldn't get sent back to the client?

Using Passenger and Thin I didn't have this problem.

No. I have been experiencing exactly the same issue, and had thought that this would solve it (it didn't, though).

As far as I can tell, mongrel calls the old rails deprecated cgi code, where thin uses the new rack adapter. The session bug doesn't occur when using any server with the rack adapter.

I'm not sure why there isn't a big fat warning (Kernel#warn) when the old cgi module is clearly deprecated - it says so right there in the code.

I think this is a pretty serious regression for 2.3.

I'll run rdebug on mongrel_rails one more time to try to isolate it. Feel free to file a more proper bug report.

Just to be clear, the bug is that the response session and the request session don't stay the same when using the cgi module. Here's a pastie of the debug session:

http://gist.github.com/61838

Notice that the same object is used for the session before calling reset_session, but afterwards the object is different.

I'm working on a patch for this right now.

Scott, I filed http://rails.lighthouseapp.com/p...

Nolan,

Great. Thanks. usually you can just refer to other tickets by ticket number: #1957 Sessions break in 2.3 with Mongrel

I've got a patch in the works - the test suite is fully passing, but I know a few integration tests are missing as it doesn't quite seem to work in my project yet. Hopefully I can pull something together tonight.

I'd be willing to apply your patch when you think it's ready to make sure it works. Seems like we're the only two who've run into this problem and that chose to be vocal about it.

I'm having some problems with the session as well, but the other way round - it's working fine with mongrel (script/server) but doesn't work on Passenger.

Calling reset_session in the controller doesn't seem to have any effect - I'm using the Authlogic gem, and am able to log in, but can't log out again!

I'm afraid I'm going away tomorrow, so won't be around to follow this up for a few days...

Josh Pencheon:

Have you tried daemonizing mongrel? Does that affect the session state?

I'm having the same problem as Josh Pencheon. What I'm trying to achieve is to issue two cookies upon login: the regular session cookie and an additional cookie that gets picked up by Varnished to avoid caching for authenticated users.

As soon as I try setting two cookies to the user, only one of the cookies get sent in the header. The other one is sent in the response body and doesn't get picked up by the browser. That is, there's a "Set-Cookie..." in the actual contents, not in the header as it should be.

Tried running the same app thru Mongrel (both daemonized and not), and it works like a charm.

Kind of reminds me of the PHP days, when PHP would spit out a warning if one tries to send headers after the server has started sending the actual payload.

Just to confirm, this seems to now be fixed with Rails 2.3.2 and Passenger 2.1.2. Thanks everyone. :-)