Product
Introducing SSO
Streamline your login process and enhance security by enabling Single Sign-On (SSO) on the Socket platform, now available for all customers on the Enterprise plan, supporting 20+ identity providers.
cookiejs
Advanced tools
Readme
:cookie: A simple, lightweight JavaScript API for handling browser cookies, it is easy to pick up and use, has a reasonable footprint (~2kb) (gzipped: 0.84kb), and has no dependencies. It should not interfere with any JavaScript libraries or frameworks.
Old v1 version document preview.
Features:
🚀 Has no dependencies
🌱 Works in all browsers
🍁 Support TypeScript, including d.ts definition
🔥 Heavily tested
📦 Supports AMD/CommonJS
💥 cookie.min.js 2.01kb(gzipped: 0.84kb)
Installed via npm. You will need Node.js installed on your system.
$ npm install cookiejs --save
import cookie from 'cookiejs';
cookie("test", "tank", 1)
Or manually download and link cookiejs
in your HTML, It can also be downloaded via UNPKG or jsDelivr CDN:
<script src="https://unpkg.com/cookiejs/dist/cookie.min.js"></script>
<script type="text/javascript">
cookie("test", "tank", 1);
</script>
cookie(key, value, num)
key
cookie name
value
cookie value
num
expires time
cookie('test', 'tank', 1) // Create a cookie that expires 1 days from now
cookie('test') // Create a cookie, valid across the entire site
cookie('test', null) // Delete cookie `test`
cookie() // Get all cookie
cookie.set('test', 'tank', 1) // ====cookie('test', 'tank', 1)
cookie.get('test') // ====cookie('test')
cookie.remove('test') // ====cookie('test',null)
cookie.remove('test3', 'test4') // Delete cookie `test3` and `test4`
cookie.clear() // Clean all cookie
cookie.all() // Get all cookie
cookie.set(name, value, options)
The same effect cookie(name, value, options)
Set the value of the cookie in batches
cookie.set({
name1: 'value1',
name2: 'value2'
});
Create cookie that expires 30 days from now
cookie('test', 'tank', 30); // Create a cookie that expires 30 days from now
cookie({ 'test':'123', 'test2':'456' }, { // 批量设置
'expires': 30,
'path': '/',
'domain':''
});
Create cookie that expires 30 days from now,and set cookie attributes
cookie('test', '123', { 'expires': 30, 'path': '/', 'domain':'' });
individually for each call to cookie.set(...)
by passing a plain object in the last argument. Per-call attributes override the default attributes.
Examples:
cookie('name', 'value', { 'expires': 30, 'path': '/', 'domain':'' });
cookie.get('name')
cookie.remove('name')
Define when the cookie will be removed. Value can be a Number which will be interpreted as days from time of creation or a Date instance. If omitted, the cookie becomes a session cookie.
cookie('name', 'value', { 'expires': 30 });
Default:
/
A String indicating the path where the cookie is visible.
cookie.set('name', 'value', { path: '' });
cookie.get('name'); // => 'value'
Default: Cookie is visible only to the domain or subdomain of the page where the cookie was created, except for Internet Explorer (see: Note regarding Internet Explorer default behavior).
⚠️If you omit the domain attribute, it will be visible for a subdomain in IE.
A String indicating a valid domain where the cookie should be visible. The cookie will also be visible to all subdomains.
Examples:
cookie.set('name', 'value', { domain: 'subdomain.website.com' });
cookie.get('name'); // => undefined (need to read at 'subdomain.website.com')
Default: No secure protocol requirement.
Either true or false, indicating if the cookie transmission requires a secure protocol (https).
Here's an examples:
cookie.set('name', 'value', { secure: true });
cookie.get('name'); // => 'value'
cookie.remove('name');
The SameSite attribute lets servers specify whether/when cookies are sent with cross-site requests (where Site is defined by the registrable domain and the scheme: http or https). This provides some protection against cross-site request forgery attacks (CSRF). It takes three possible values: Strict, Lax, and None.
With Strict, the cookie is only sent to the site where it originated. Lax is similar, except that cookies are sent when the user navigates to the cookie's origin site. For example, by following a link from an external site. None specifies that cookies are sent on both originating and cross-site requests, but only in secure contexts (i.e., if SameSite=None
then the Secure attribute must also be set). If no SameSite
attribute is set, the cookie is treated as Lax.
Here's an example:
cookie.set('name', 'value', { sameSite: 'Strict' });
Note: The standard related to
SameSite
recently changed (MDN documents the new behavior above). See the cookies Browser compatibility table for information about how the attribute is handled in specific browser versions:
SameSite=Lax
is the new default ifSameSite
isn't specified. Previously, cookies were sent for all requests by default.
- Cookies with
SameSite=None
must now also specify theSecure
attribute (they require a secure context).- Cookies from the same domain are no longer considered to be from the same site if sent using a different scheme (
http:
orhttps:
).
As always, thanks to our amazing contributors!
Made with action-contributors.
Licensed under the MIT License.
FAQs
A simple, lightweight JavaScript API for handling browser cookies.
The npm package cookiejs receives a total of 10,484 weekly downloads. As such, cookiejs popularity was classified as popular.
We found that cookiejs demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Streamline your login process and enhance security by enabling Single Sign-On (SSO) on the Socket platform, now available for all customers on the Enterprise plan, supporting 20+ identity providers.
Security News
Tea.xyz, a crypto project aimed at rewarding open source contributions, is once again facing backlash due to an influx of spam packages flooding public package registries.
Security News
As cyber threats become more autonomous, AI-powered defenses are crucial for businesses to stay ahead of attackers who can exploit software vulnerabilities at scale.