cookie-secure
Version:
This module for setting and getting secure cookies from
74 lines (52 loc) • 2.19 kB
Markdown


This node module for setting cookies securarly
This module sets and get cookie
1. choose expires or max-age
2. httponly set true to prevent access from client javascript access
3. Same-site sting by defualt is `strict` other option is `lax`
4. secure cookie is only allowed with https
var cookieString =setCookieString(req, res, name, value, expires ,maxAge, httponly=true,https=false, SameSite="Strict");
setCookie(req, res, cookieString, data="", resEnd=true);
var cuCokkie = getCookie(req, res, curCookie);
Below code you will see how set https server as how to use secure cookie.
To get self signed SSL use on loacal host testing pupose use below command
```
/*
open git bash and type below commond to generate self signed ssl key and certifiacte
openssl genrsa 1024 > key.pem
openssl req -x509 -new -key key.pem > cert.pem
*/
```
var cookie = require("cookie-secure");
var https = require("https");
var fs = require("fs");
const options={
key : fs.readFileSync(__dirname + "/key.pem"),
cert : fs.readFileSync(__dirname + "/cert.pem")
}
https.createServer(options, (req, res) => {
var curCookie = "testHTTPS";
if(req.url = "/"){
var co =cookie.setCookieString(req, res, curCookie ,"rve", "",60*60*24,false,true);
cookie.setCookie(req, res, co, "done",true);
}else if(req.url == "/get_cookie"){
cookie.getCookie(req, res, curCookie);
}
}).listen(8000);
var http = require("http");
http.createServer(function(req, res){
var curCookie = "testHTTP";
if(req.url = "/"){
var co = cookie.setCookieString(req, res, curCookie,"uemsh", Date(),60*60*24,false, false);
cookie.setCookie(req, res, co, "done",true);
}else if(req.url == "/get_cookie"){
cookie.getCookie(req, res, curCookie);
}
}).listen(9000)
```