createCookieSigner

Creates a signer. The first secret signs; every secret verifies, so a secret can be rotated by putting the new one first and keeping the old one until its cookies expire. The signature covers the cookie name too, so a value cannot be moved to another cookie.

Import#

import { createCookieSigner } from "@shadow-js/dusk/server";

Signature#

function createCookieSigner(secrets: readonly string[]): CookieSigner

Parameters#

Returns#

The signer.

Throws#

• Error with code COOKIE_SECRET_MISSING or COOKIE_SECRET_WEAK.

Examples#

const signer = createCookieSigner([process.env.COOKIE_SECRET]);
const cookie = await signer.sign("sid", "abc");