Cannot manually set token for wp_set_auth_cookie

[rmccue]

While the underlying wp_generate_auth_cookie accepts passing in a token rather than generating one, wp_set_auth_cookie does not.

This is problematic if developing an SSO plugin, as you'll end up with different tokens for the differing cookie domains (unless you reimplement wp_set_auth_cookie). Being able to pass the token in when calling would allow cookies to be invalidated automatically across all cookie domains on logout.

[rmccue]

Note: it would be trivial to workaround this if WP_Session_Manager::create wasn't final :)

[johnbillion]

+1

[rmccue]

Added patch.

Note that this does change a pluggable function, but changing wp_generate_auth_cookie did the same, so I'm not overly concerned about this.

[johnbillion]

Fixed in r32465