These options are used in the HttpResponse.cookie method.
Domain the cookie is set for.
Cookie expiration date (until when the cookie’s value is stored in the browser). This property’s value is set separately from maxAge.
maxAge
Cookies marked as HttpOnly are not available for the client JavaScript.
HttpOnly
Cookie max age.
Relative path the cookie is set for.
lax
strict
none
Whether the cookie must be set only via a secure connection.
Cookie options
These options are used in the HttpResponse.cookie method.
Hierarchy
Properties
Optional domain
Domain the cookie is set for.
Optional expires
Cookie expiration date (until when the cookie’s value is stored in the browser). This property’s value is set separately from
maxAge.Optional httpOnly
Cookies marked as
HttpOnlyare not available for the client JavaScript.Optional maxAge
Cookie max age.
Optional path
Relative path the cookie is set for.
Optional sameSite
Rules for sending cookies to third-party websites
laxis the default value. It means that cookies will not be sent to other websites in most cases.strictmeans that cookies will never be sent unless the user came from this website.nonemeans that cookies will be sent in any requests.Optional secure
Whether the cookie must be set only via a secure connection.