topic Re: Remove HttpOnly cookie using serverless in APIs & Integrations

Remove HttpOnly cookie using serverless

CBelga — Tue, 12 Sep 2023 18:26:52 GMT

Has anyone here tried removing a HttpOnly cookie using the serverless "Set-Cookie" following this documentation?

Below is a sendResponse in my serverless.

sendResponse({ body: {message: `Cookie ${cookieName} deleted successfully`}, "Set-Cookie": `${cookieName}=; expires=Thu, 01 Jan 1970 00:00:01 GMT; path=/; domain=.hs-sites.com; httpOnly=true;secure`, statusCode: 200 });

Re: Remove HttpOnly cookie using serverless

Jaycee_Lewis — Wed, 13 Sep 2023 19:49:25 GMT

Hi, @CBelga 👋 Thank you for the interesting question!

I'd like to invite some of our community members to the conversation. Hey, @Teun @louischausse @Kevin-C @DHolland @stefen, do you have any recent experience you can share with @CBelga?

Thank you for taking a look! — Jaycee

Re: Remove HttpOnly cookie using serverless

CBelga — Wed, 13 Sep 2023 20:00:30 GMT

I've developed a private, password-protected webpage on HubSpot. When a user enters the correct password, a cookie named "_key" followed by random numbers (e.g. 124794456884_key) is generated. If this cookie is manually deleted, the user is prompted to re-enter the password upon revisiting the page. I want to enable the manual deletion of this cookie when the user clicks a logout button or link. However, the cookie is HttpOnly, meaning it can only be removed server-side. I attempted to use a serverless function and "Set-Cookie", but it was unsuccessful.