session.cookie.ts RawHistoryFolder

1import type { Cookies } from '@sveltejs/kit';
2import { dev } from '$app/environment';
3import { env } from '$env/dynamic/private';
4import { createLogger } from '$lib/utils/logger.server';
5
6const log = createLogger('session-cookie');
7
8// Host-only cookie by default; set COOKIE_DOMAIN for cross-subdomain cookies
9function getCookieDomain(): string | undefined {
10	const envDomain = env.COOKIE_DOMAIN;
11	if (envDomain) {
12		log.debug('Using COOKIE_DOMAIN from environment:', { domain: envDomain });
13		return envDomain;
14	}
15	return undefined;
16}
17
18export function setSessionTokenCookie(
19	{ cookies }: { cookies: Cookies },
20	token: string,
21	expiresAt: number
22): void {
23	log.debug('Setting session cookie with expiry:', new Date(expiresAt));
24
25	const domain = getCookieDomain();
26	log.debug('Setting cookie for domain:', { domain });
27
28	cookies.set('session', token, {
29		httpOnly: true,
30		sameSite: 'lax',
31		secure: !dev,
32		domain,
33		expires: new Date(expiresAt),
34		path: '/'
35	});
36}
37
38export function deleteSessionTokenCookie({ cookies }: { cookies: Cookies }): void {
39	log.debug('Deleting session cookie');
40
41	const domain = getCookieDomain();
42	log.debug('Deleting cookie for domain:', { domain });
43
44	cookies.set('session', '', {
45		httpOnly: true,
46		sameSite: 'lax',
47		secure: !dev,
48		domain,
49		maxAge: 0,
50		path: '/'
51	});
52}
53
54export function getSessionTokenCookie({ cookies }: { cookies: Cookies }): string | undefined {
55	log.debug('Getting session cookie');
56	return cookies.get('session');
57}