add cookie_name config option

web/internal/api/api.go

@@ -110,9 +110,7 @@ func NewAPI(cfg *config.Config, ceodSrv model.CeodService, mailSrv service.MailS
 	addStaticAssets(cfg.IsDev, e)
 	e.Use(appContextMiddleware(useFCGI(cfg), app))
 	e.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
-		// The cookie name needs to be very unique because this app is
-		// being served from the root CSC domain
-		TokenLookup:    "cookie:ceod-web-csrf",
+		TokenLookup:    "cookie:" + cfg.CookieName,
 		CookieName:     "ceod-web-csrf",
 		CookiePath:     cfg.GetAppPath(),
 		CookieDomain:   cfg.GetAppHostname(),

web/internal/config/config.go

@@ -11,6 +11,9 @@ import (
 const (
 	defaultKrb5Config = "/etc/krb5.conf"
 	defaultKrb5KtName = "/etc/krb5.keytab"
+	// The cookie name needs to be very unique because this app is
+	// being served from the root CSC domain
+	defaultCookieName = "ceod-web-csrf"
 	ceodHostname      = "phosphoric-acid"
 	ceodPort          = 9987
 )
@@ -23,6 +26,7 @@ type Config struct {
 	CSCDomain            string `json:"csc_domain"`
 	UWDomain             string `json:"uw_domain"`
 	MTA                  string `json:"mta"`
+	CookieName           string `json:"cookie_name"`
 	IsDev                bool   `json:"dev"`
 	ForcedEmailRecipient string `json:"forced_email_recipient"`
 
@@ -79,6 +83,9 @@ func NewConfig(cfgPath string) *Config {
 	} else if cfg.appPath[len(cfg.appPath)-1] != '/' {
 		cfg.appPath += "/"
 	}
+	if cfg.CookieName == "" {
+		cfg.CookieName = defaultCookieName
+	}
 	if !cfg.IsDev && cfg.MTA == "" {
 		panic(fmt.Errorf(`"mta" is missing from %s`, cfgPath))
 	}