Drupal 7 uses a secure cookie to store the users session when operating through SSL. Thus, it is not currently possible to switch between SSL and insecure sessions (like secure pages module might do). Our sites therefore operate solely under SSL.

We use the rules integration to invoke the social sharing widget upon posting a 'post' content type. Under SSL it always comes back with 'invalid session' error. With SSL off, it works fine.

Could this be because the widget is not able to read the secure cookie?

This will be a critical problem for the social sharing widget under D7, for commerce sites that use SSL (which should be all i guess).

Thanks in advance for help/advice!

Comments

chris-cmfi’s picture

+1