Use the Response.cookie() method to manipulate your cookies.
Examples:
res.cookie('username', 'Flavio')
This method accepts a third parameter, which contains various options:
res.cookie('username', 'Flavio', { domain: '.flaviocopes.com', path: '/administrator', secure: true })
res.cookie('username', 'Flavio', { expires: new Date(Date.now() + 900000), httpOnly: true })
The most useful parameters you can set are:
| Value | Description |
|---|---|
domain |
The cookie domain name |
expires |
Set the cookie expiration date. If missing, or 0, the cookie is a session cookie |
httpOnly |
Set the cookie to be accessible only by the web server. See HttpOnly |
maxAge |
Set the expiry time relative to the current time, expressed in milliseconds |
path |
The cookie path. Defaults to ‘/’ |
secure |
Marks the cookie HTTPS only |
signed |
Set the cookie to be signed |
sameSite |
Value of SameSite |
A cookie can be cleared with:
res.clearCookie('username')