_forward_auth_claims doesn't respect domain cookie property

[geiseri]

It looks like the group's cookie is not respecting the domain so that it will not allow anything else to log in.

If I look at the server I see the logs below:

1161f0309308 is my idp, and c069e53d0118 is the auth docker. If you see the idp returns the groups correctly, and it looks like the cookie is properly populated. The issue is that chrome filters the cookie since its not associated with my whois domain. If I roll back to 1.0.4 (before the groups change) it works properly.

[jr0d]

We we're not explicitly setting the cookie domain (if one is set) on the session cookie. The linked issue should correct this behavior.