nginx Set-Cookie directive

Question

Is it possible to modify cookies when using nginx as a reverse proxy similar to what Set-Cookie does in apache?

I have a web application that sets session cookies and I wish to append the HttpOnly flag to them before they are served by nginx. Unfortunatly I cannot modify the source code of the application to do it there.

Possible duplicate of serverfault.com/questions/278319/…. Seems to be that the same "It's not possible" and methods for resolving it apply. — Kyle Smith
– Kyle Smith, Commented Apr 1, 2012 at 21:50
didn't tried it, but I suppose that you can modify the header via wiki.nginx.org/HttpHeadersMoreModule — hellvinz
– hellvinz, Commented May 23, 2012 at 9:32

Community · Accepted Answer · 2017-04-13 12:14:17Z

You can always use add_header to add one, but even if you parse cookies coming down from backend looking at the http_cookie variable, you won't be able to modify them using vanilla nginx.

What you could use however is the 3rd-party Lua module. The link provided by Kyle Sith has an answer containg a small code snippet manipulating cookies (https://serverfault.com/a/448887/140131).

Can't you edit the header like you can with apache?

Freedo
– Freedo

2020-04-08 10:59:46 +00:00
Commented Apr 8, 2020 at 10:59 — Freedo
– Freedo, Commented Apr 8, 2020 at 10:59

Stack Exchange Network

nginx Set-Cookie directive

1 Answer 1

You must log in to answer this question.

Linked

Hot Network Questions

nginx Set-Cookie directive

1 Answer 1

You must log in to answer this question.

Linked

Related

Hot Network Questions