{"action":"created","issue":{"url":"https://api.github.com/repos/nextcloud/server/issues/9010","repository_url":"https://api.github.com/repos/nextcloud/server","labels_url":"https://api.github.com/repos/nextcloud/server/issues/9010/labels{/name}","comments_url":"https://api.github.com/repos/nextcloud/server/issues/9010/comments","events_url":"https://api.github.com/repos/nextcloud/server/issues/9010/events","html_url":"https://github.com/nextcloud/server/issues/9010","id":309308688,"number":9010,"title":"Logging out from Nextcloud deletes all cookies from sibling subdomains","user":{"login":"bszente","id":1277924,"avatar_url":"https://avatars2.githubusercontent.com/u/1277924?v=4","gravatar_id":"","url":"https://api.github.com/users/bszente","html_url":"https://github.com/bszente","followers_url":"https://api.github.com/users/bszente/followers","following_url":"https://api.github.com/users/bszente/following{/other_user}","gists_url":"https://api.github.com/users/bszente/gists{/gist_id}","starred_url":"https://api.github.com/users/bszente/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bszente/subscriptions","organizations_url":"https://api.github.com/users/bszente/orgs","repos_url":"https://api.github.com/users/bszente/repos","events_url":"https://api.github.com/users/bszente/events{/privacy}","received_events_url":"https://api.github.com/users/bszente/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2018-03-28T10:28:30Z","updated_at":"2018-04-11T11:38:23Z","closed_at":null,"author_association":"NONE","body":"### Scenario\r\n\r\nNextcloud 13.0.1 installed on `cloud.example.com` subdomain with HTTPS\r\nRoundcube 1.3.4 installed on `mail.example.com` subdomain with HTTPS\r\n\r\nSo both have their individual subdomain under our own domain (replaced with `example.com` here in bug report).\r\n\r\n### Steps to reproduce\r\n1. Open Chromium/Chrome (tested with 63+)\r\n2. Log in to Roundcube (or any web page that uses session cookies, e.g. Redmine)\r\n3. In a new tab log in to Nextcloud\r\n4. Log out from Nextcloud\r\n\r\n### Expected behaviour\r\nNextcloud will be logged out. Roundcube will still be logged in and usable.\r\n\r\n### Actual behaviour\r\nNextcloud will be logged out. Roundcube session will be **expired** and **user logged out**. This is the actual issue.\r\n\r\n#### More info\r\n1. It happens with **Chrome/Chromium only**, _Firefox_ works as expected.\r\n2. What happens exactly: logging out from Nextcloud deletes all cookies from *sibling subdomains* resulting in end of session for the other web applications.\r\n\r\n### Server configuration\r\n\r\n**Operating system**: CentOS 7 (Virtualmin is used)\r\n\r\n**Web server:** Stock Apache\r\n\r\n**Database:** Stock MySQL\r\n\r\n**PHP version:** Stock version\r\n\r\n**Nextcloud version:** 13.0.1\r\n\r\n**Updated from an older Nextcloud/ownCloud or fresh install:** updated from latest 12.0.x\r\n\r\n**Signing status:**\r\n<details>\r\n<summary>Signing status</summary>\r\n\r\n```\r\nNo errors have been found.\r\n```\r\n</details>\r\n\r\n**Are you using external storage, if yes which one:** no\r\n\r\n**Are you using encryption:** no\r\n\r\n**Are you using an external user-backend, if yes which one:** IMAP\r\n\r\n### Client configuration\r\n**Browser:** Chromium 64, Chrome 65\r\n\r\n**Operating system:** Linux, Windows\r\n\r\n### Logs\r\n\r\n#### Browser log\r\n<details>\r\n<summary>Browser log when logging out (domain replaced with <code>example.com</code>)</summary>\r\n\r\n```\r\ncloud.example.com/:1 Clear-Site-Data header on 'https://cloud.example.com/logout?requesttoken=k9K/ULgi8Ht9z4vTCYyHLAFCRS3wWjWXSLvvkR0dipk%3D%3Aq6vSGtkQtDwUmv%2BjO%2BPFTVRydkqiIGDgZ%2B625CxFwq0%3D': The \"cache\" datatype is temporarily not supported.\r\ncloud.example.com/:1 Clear-Site-Data header on 'https://cloud.example.com/logout?requesttoken=k9K/ULgi8Ht9z4vTCYyHLAFCRS3wWjWXSLvvkR0dipk%3D%3Aq6vSGtkQtDwUmv%2BjO%2BPFTVRydkqiIGDgZ%2B625CxFwq0%3D': Unrecognized type: \"executionContexts\".\r\ncloud.example.com/:1 Clear-Site-Data header on 'https://cloud.example.com/logout?requesttoken=k9K/ULgi8Ht9z4vTCYyHLAFCRS3wWjWXSLvvkR0dipk%3D%3Aq6vSGtkQtDwUmv%2BjO%2BPFTVRydkqiIGDgZ%2B625CxFwq0%3D': Cleared data types: \"cookies\", \"storage\".\r\nNavigated to https://cloud.example.com/login\r\ncore.js?v=cc8677c4-25:7 JQMIGRATE: Migrate is installed, version 1.4.0\r\nDevTools failed to parse SourceMap: https://cloud.example.com/core/vendor/purify.min.js.map\r\n```\r\n</details>\r\n"},"comment":{"url":"https://api.github.com/repos/nextcloud/server/issues/comments/380421540","html_url":"https://github.com/nextcloud/server/issues/9010#issuecomment-380421540","issue_url":"https://api.github.com/repos/nextcloud/server/issues/9010","id":380421540,"user":{"login":"tflidd","id":8111200,"avatar_url":"https://avatars0.githubusercontent.com/u/8111200?v=4","gravatar_id":"","url":"https://api.github.com/users/tflidd","html_url":"https://github.com/tflidd","followers_url":"https://api.github.com/users/tflidd/followers","following_url":"https://api.github.com/users/tflidd/following{/other_user}","gists_url":"https://api.github.com/users/tflidd/gists{/gist_id}","starred_url":"https://api.github.com/users/tflidd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tflidd/subscriptions","organizations_url":"https://api.github.com/users/tflidd/orgs","repos_url":"https://api.github.com/users/tflidd/repos","events_url":"https://api.github.com/users/tflidd/events{/privacy}","received_events_url":"https://api.github.com/users/tflidd/received_events","type":"User","site_admin":false},"created_at":"2018-04-11T11:38:23Z","updated_at":"2018-04-11T11:38:23Z","author_association":"CONTRIBUTOR","body":"@LukasReschke "}}
{"actor":{"display_login":"tflidd"}}