ktor-server-sessions/io.ktor.server.sessions/CookieConfiguration

CookieConfiguration

class CookieConfiguration

A configuration used to specify cookie attributes for Sessions.

Constructors

CookieConfiguration

constructor()

Properties

domain

var domain: String?

Specifies the host to which the cookie is sent.

encoding

var encoding: CookieEncoding

Specifies a cookie encoding.

extensions

val extensions: MutableMap<String, String?>

Allows you to add custom cookie attributes, which are not exposed explicitly. For example, you can pass the SameSite attribute in the following way:

httpOnly

var httpOnly: Boolean

Specifies whether cookie access is forbidden from JavaScript.

maxAge

var CookieConfiguration.maxAge: Duration?

Cookie time to live duration or null for session cookies. Session cookies are client-driven. For example, a web browser usually removes session cookies at browser or window close unless the session is restored.

maxAgeInSeconds

var maxAgeInSeconds: Long?

Specifies the number of seconds until the cookie expires.

path

var path: String?

Cookie path

sameSite

var CookieConfiguration.sameSite: String?

Cookie configuration extension to supply the "SameSite" attribute for preventing cross-site request forgery (CSRF) attacks.

secure

var secure: Boolean

Enables transferring cookies via a secure connection only and protects session data from HTTPS downgrade attacks.