andreizanik / cookies-next

Getting, setting and removing cookies on both client and server with next.js

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

It does not allow to configure the cookie with the option httpOnly

EdinsonG opened this issue · comments

When creating the cookie without the httpOnly option, it is created correctly, however, when adding the httpOnly option, I do not create it and it does not return any error

note: I am creating the cookies client side

setCookie(name, value, { secure: true, httpOnly: true });

Hello.
I think you call setCookie on client side.

You need to use this function with req, res
setCookie(name, value, { secure: true, httpOnly: true, req, res });

req and res are only for server-side, not client-side. Those don't exist on the client.

So, the question again is, how do we do this from the client side?

Same problem here, on client side, using this

        const options: OptionsType = {
          httpOnly: true,
          path: '/',
          sameSite: true,
          secure: true,
        };
        setCookie(name, value, { ...options, maxAge: 100 });

The cookie is not created.

If I comment httpOnly: true,, the cookie is created

Hello!
As far as I know setting cookie with httponly flag on client side is not possible at all. You can do this only on the server. Here is the topic from stackoverflow.

So, the question again is, how do we do this from the client side?

It's impossible. This is standard behavior for all cookies
You can see stackoverflow link above and this one