I have a front-end login process via
admin-ajax.php. It's a standard user/pass form so I submit the POST request to a secure, https, endpoint regardless of whether the user is currently on a secure connection. The user is thus logged in on the secure domain - but WordPress does not recognize the login on the insecure domain she may be browsing from. How can I set cookies on both secure and non-secure origins at the same time? I've been exploring something like hooking into the
set_logged_in_cookie action but can't get both sets of cookies to stick.
Related but unanswered questions: How can I make an Ajax login form work with FORCE_SSL_ADMIN enabled? and AJAX-login over https on a http page, is it possible?