Manage Cookies with Express
By Flavio
Published · Updated
Tagged: Express.js
Learn how to manage cookies in Express with the res.cookie() method, set options like httpOnly, secure, and expires, and clear one with res.clearCookie().
Use the Response.cookie() method to manipulate your cookies.
Examples:
res.cookie('username', 'Flavio')This method accepts a third parameter, which contains various options:
res.cookie('username', 'Flavio', { domain: '.flaviocopes.com', path: '/administrator', secure: true })
res.cookie('username', 'Flavio', { expires: new Date(Date.now() + 900000), httpOnly: true })The most useful parameters you can set are:
| Value | Description |
|---|---|
domain | The cookie domain name |
expires | Set the cookie expiration date. If missing, or 0, the cookie is a session cookie |
httpOnly | Set the cookie to be accessible only by the web server. See HttpOnly |
maxAge | Set the expiry time relative to the current time, expressed in milliseconds |
path | The cookie path. Defaults to ’/‘ |
secure | Marks the cookie HTTPS only |
signed | Set the cookie to be signed |
sameSite | Value of SameSite |
A cookie can be cleared with:
res.clearCookie('username')Want me to talk about your product? You can sponsor this site.