Set, clear, and parse cookies in your Koa application
-
Updated
Sep 13, 2026 - TypeScript
Set, clear, and parse cookies in your Koa application
HTTP Cookie and Set-Cookie parser, serializer, and cookie jar primitives for Dart and Flutter clients.
A tiny, typed cookie API that uses the Cookie Store API when available and falls back safely to document.cookie
Audit Set-Cookie headers: missing Secure/HttpOnly/SameSite, __Host-/__Secure- prefix violations, broad Domain, long expiry, cookies over HTTP, JWTs and emails in values, with a fix for each. Text, JSON, SARIF, Markdown; GitHub Action. Zero deps.
Lint Set-Cookie headers for security locally — missing HttpOnly/Secure/SameSite, SameSite=None without Secure, over-broad Domain, and __Host-/__Secure- prefix violations that make browsers silently drop your cookie. Deterministic CLI, JSON/MD reports.
Server-layer relay for Next.js and Nuxt. One policy for what crosses between the browser and your backend.
Parse Set-Cookie response headers into structured cookies, and split comma-joined Set-Cookie headers (Expires-date safe). A faithful Rust port of the set-cookie-parser npm package. Zero deps, no_std.
Removes unsupported headers from responses, restoring modern websites' functionality on older web browsers.
[READ ONLY] Athenaeum Http Cookies package - see https://github.com/aedart/athenaeum
To associate your repository with the set-cookie topic, visit your repo's landing page and select "manage topics."