Cookies.get() is undefined

Question

EDIT: its work / i can get the cookies value when the httpOnly = false, Why?

Im using js-cookie package,

When I open the chrome dev tools, there is a cookie token.

but when im using Cookies.get('token'), result is undefined.

and using Cookies.get() also the result is undefined.

this is my code:

import Cookies from 'js-cookie'
const [token, setToken] = useState(Cookies.get())
// const [token, setToken] = useState(Cookies.get('token'))

useEffect(() => {
    console.log(token) //undefined

    CheckAuth(token)
                .then(data => {
                    setLoggedInUser(data.user)
                })
                .catch(error => {
                    Cookies.remove('token')
                    setErrorMessage(error.message)
                })
                .finally(() => {
                    setLoading(false)
                })
}, [])

Put `Cookies.get()` in a useEffect? – evolutionxbox Aug 31 '21 at 01:17 — evolutionxbox, Aug 31 '21 at 01:17
@evolutionxbox it's the same, the result is undefined – Zulfikar Ahmad Aug 31 '21 at 01:20 — Zulfikar Ahmad, Aug 31 '21 at 01:20
edit: i can get the result when the HttpOnly is false – Zulfikar Ahmad Aug 31 '21 at 01:21 — Zulfikar Ahmad, Aug 31 '21 at 01:21
is that how HttpOnly works? – Zulfikar Ahmad Aug 31 '21 at 01:21 — Zulfikar Ahmad, Aug 31 '21 at 01:21

score 6 · Accepted Answer · edited Aug 31 '21 at 02:56

6

It’s a valid behaviour. Using httpOnly = true, flag while generating a cookie, makes the cookie a protected one. And if a certain browser supports httpOnly flag, It won’t allow the client side script to use such a protected cookie. Kindly find more details here, https://owasp.org/www-community/HttpOnly

edited Aug 31 '21 at 02:56

Dharman

30,962
25
85
135

answered Aug 31 '21 at 02:51

user16790253

98
4

Cookies.get() is undefined

1 Answers1