Skip to content

Proper support for RFC 6265 cookies - #97

Open
pavelhoral wants to merge 1 commit into
WrenSecurity:mainfrom
pavelhoral:feat-rfc6265
Open

Proper support for RFC 6265 cookies#97
pavelhoral wants to merge 1 commit into
WrenSecurity:mainfrom
pavelhoral:feat-rfc6265

Conversation

@pavelhoral

Copy link
Copy Markdown
Member

Add support for cookies with arbitrary attribute-value pairs.

No special treatment for the obsolete RFC 2965. Additional cookie attributes in Cookie header are silently ignored on parsing. This means that parsing old cookie header and then generating the same header again will produce different output:

- Cookie: $Version=1; Foo=Bar; $Path=/hello
+ Cookie: Foo=Bar

The main motivation behind this change is to unlock the possibility to work with SameSite cookie attribute. This attribute is only available when there is a possibility to add non-standard attribute to a cookie.

The main inspiration for the Cookie refactor was Jakarta EE 6 Cookie class.

Add support for cookies with arbitrary attribute-value pairs.

No special treatment for the obsolete RFC 2965. Additional attributes in
Cookie header are silently ignored on parsing. This means that parsing
old cookie header and then generating the same header again will produce
different output.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant