serializeCookie

Builds a Set-Cookie value. Secure by default: HttpOnly; Secure; SameSite=Lax; Path=/. Names, domains and paths are validated, so no attribute can inject another or a header line.

Import#

import { serializeCookie } from "@shadow-js/dusk/server";

Signature#

function serializeCookie(name: string, value: string, options: CookieOptions = {}): string

Parameters#

Returns#

The header value.

Throws#

• TypeError for an invalid name, domain, path or a prefix rule violation (__Host-, __Secure-, SameSite=None without Secure). RangeError for a cookie over 4096 bytes.

Examples#

serializeCookie("theme", "dark", { maxAge: 31_536_000, httpOnly: false });