Set cookie for domain instead of subDomain using NodeJS and ExpressJS

Question

I have been using expressjs and mongostore for session management. Following is the code to configure store in expressjs,

app.configure(function(){
    app.use(express.session({
        secret: conf.secret,
        maxAge: new Date(Date.now() + 3600000),
        cookie: { path: '/' },
        store: new MongoStore(conf.db)
    }));
});

I had mentioned the cookie path in the above code. But it sets the cookie in sub.domain.com instead of .domain.com. How do i achieve this?

Remember that setting cookies to main domain name will cost you additional network traffic. See [Best Practices for Speeding Up Your Web Site](http://developer.yahoo.com/performance/rules.html#cookie_free) from Yahoo guys. — esengineer, Nov 02 '12 at 11:35

score 42 · Answer 1 · edited Aug 17 '13 at 08:55

42

Try to use the following link to configure.

res.cookie('name', 'tobi', { domain: '.example.com', path: '/admin', secure: true });

Link : http://expressjs.com/api.html#res.cookie

edited Aug 17 '13 at 08:55

arulmr

8,620
9
54
69

answered Aug 17 '13 at 08:38

AmirtharajCVijay

1,078
11
12

2

Why when I just add this part "domain: '.example.com', " cookie is not added and when I delete it, cookie is added? – Ahmad Ebrahimi Nov 04 '19 at 16:17
2

I just tried `example.com` and it worked. Is there any difference in adding a `.` in there? – Esqarrouth Mar 26 '21 at 11:44

score 42 · Accepted Answer · answered Oct 25 '11 at 09:42

42

configure it like this:

app.use(express.session({
    secret: conf.secret,
    cookie: { domain:'.yourdomain.com'},
    store: new MongoStore(conf.sessiondb)
}));

answered Oct 25 '11 at 09:42

metis

444
5
2

5

Is it possible to set a cookie for more than one domain? ex : cookie: { domain:'.yourdomain1.com','yourdomain2.com}, – Feb 19 '20 at 13:06
I just tried `example.com` and it worked. Is there any difference in adding a `.` in there? – Esqarrouth Mar 26 '21 at 11:44

score 1 · Answer 3 · answered Jun 02 '22 at 05:31

This won't work, it throws error. Error: Most middleware (like session) is no longer bundled with Express and must be installed separately. Please see https://github.com/senchalabs/connect#middleware.

app.use(express.session({
    secret: conf.secret,
    cookie: { domain:'.yourdomain.com'},
    store: new MongoStore(conf.sessiondb)
}));

I have a reference link, from where you can take help to set domain in cookie https://flaviocopes.com/express-cookies/

Set cookie for domain instead of subDomain using NodeJS and ExpressJS

3 Answers3

Linked