Results for make-signed-cookie

Create a keygrip signed cookie

Parse HTTP request cookies

Cookies, optionally signed using Keygrip.

TypeScript definitions for cookie-parser

HTTP server cookie parsing and serialization

RFC6265 Cookies and Cookie Jar for node.js

Parses set-cookie headers into objects

<!-- automd:badges bundlejs packagephobia codecov -->

Sign and unsign cookies

A simple, lightweight JavaScript API for handling cookies

Cookie authentication strategy for Passport

simple persistent cookiejar system

TypeScript definitions for tough-cookie

JWT JWKS verification plugin for Fastify

TypeScript definitions for js-cookie

mirror of cookie, bundled and exposed as ES module

Universal cookies for JavaScript

Decorator for a `fetch` function to support automatic cookies.

TypeScript definitions for set-cookie-parser

Descope JavaScript web SDK

RFC 6265 compliant cookie parser, validator and serializer.

Universal cookies for React

Simple utility for decoding Rails 4.x sessions in node.js

Simple session middleware for Express

rack-deadline is a simple rack middleware that automatically clears sessions that have been open too long (by default, 1 day). This is designed for use with cookie stores to mitigate the risk of session fixation, since it is impossible to invalidate older sessions with a pure cookie-based approach. It is impossible to enforce a deadline with the standard rack cookie session API. The expire_after setting is not part of the session itself (it's part of the cookie, and not cryptographically signed), and an attacker who has access to a previous cookie can just omit it when making a request. This stores a deadline inside the crytographically signed session, and once the deadline is passed, the session will no longer be valid.