HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Please upgrade here. These earlier versions are no longer being updated and have security issues.

Can I use the sessions/cookies I'm creating in my website for a Vanilla Forum?

Hi guys,

I've been tasked with implementing a forum for our customers, with the only caveat being the ease of use between our app and the forum. We already have user auth implemented within our app and would like to use the same sessions in the forum, which we would ideally host on the same server.

Is there a simple way I can override the user login functionality and pass the session info to Vanilla? Users should not be able to access the forum unless they are logged in on the home app, so I think just matching up the sessions and cookies should do it. Any experience with this?

Sign In or Register to comment.