cookie-monster

A Cookie library for parsing and managing HTTP Cookies.

Features

jiff, adds support for the jiff crate.
chrono, adds support for the chrono crate.
time, adds support for the time crate.
percent-encode, percent-encode/decode cookies.
axum, adds integration with the axum crate.
http, adds integration with the http crate.

Install

# Cargo.toml
[dependencies]
cookie-monster = "0.1"

# Integration with the `time` crate
cookie-monster = { version = "0.1", features = ["time"] }
# Integration with the`chrono` crate
cookie-monster = { version = "0.1", features = ["chrono"] }
# Integration with the `jiff` crate
cookie-monster = { version = "0.1", features = ["jiff"] }

# Adds support for percent-encoding/decoding cookies.
cookie-monster = { version = "0.1", features = ["percent-encoding"] }

# Integration with the `axum` crate.
cookie-monster = { version = "0.1", features = ["axum"] }

# Integration with the `http` crate.
cookie-monster = { version = "0.1", features = ["http"] }

Axum example

use axum::response::IntoResponse;
use cookie_monster::{Cookie, CookieJar, SameSite};

static COOKIE_NAME: &str = "session";

async fn handler(mut jar: CookieJar) -> impl IntoResponse {
    if let Some(cookie) = jar.get(COOKIE_NAME) {
        // Remove cookie
        println!("Removing cookie {cookie:?}");
        jar.remove(Cookie::named(COOKIE_NAME));
    } else {
        // Set cookie.
        let cookie = Cookie::build(COOKIE_NAME, "hello, world")
        .http_only()
        .same_site(SameSite::Strict);

        println!("Setting cookie {cookie:?}");
        jar.add(cookie);
    }
    // Return the jar so the cookies are updated
   jar
}

Prefix cookies

Cookie::host and Cookie::secure build cookies using the __Host- and __Secure- name prefixes (RFC 6265bis §4.1.3). They set the attributes the prefix requires as defaults (which you can override to build non-standard cookies) and apply the prefix to the name on serialization. Parsing strips a recognized prefix from the name, so a prefixed cookie is looked up in a CookieJar by its logical (unprefixed) name.

use cookie_monster::Cookie;

let cookie = Cookie::host("id", "abc").build();
assert_eq!(cookie.name(), "id");
assert_eq!(cookie.serialize().as_deref(), Ok("__Host-id=abc; Path=/; Secure"));

Minimum Supported Rust Version (MSRV)

The cookie-monster crate has rust version 1.85 as MSRV.

Honorable mention

This crate takes a lot of inspiration from the cookie crate.

License

This project is licensed under the MIT license.

cookie-monster 0.2.2