@akinon/next 1.92.0-rc.11 → 1.92.0-rc.13

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @akinon/next
 
+## 1.92.0-rc.13
+
+### Minor Changes
+
+- facf1ad: ZERO-3445: Add SameSite and Secure attributes
+
+## 1.92.0-rc.12
+
+### Minor Changes
+
+- f7fd459: ZERO-3445: Refactor setCookie function to include domain handling and improve cookie string construction
+
 ## 1.92.0-rc.11
 
 ### Minor Changes

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@akinon/next",
   "description": "Core package for Project Zero Next",
-  "version": "1.92.0-rc.11",
+  "version": "1.92.0-rc.13",
   "private": false,
   "license": "MIT",
   "bin": {
@@ -34,7 +34,7 @@
     "set-cookie-parser": "2.6.0"
   },
   "devDependencies": {
-    "@akinon/eslint-plugin-projectzero": "1.92.0-rc.11",
+    "@akinon/eslint-plugin-projectzero": "1.92.0-rc.13",
     "@babel/core": "7.26.10",
     "@babel/preset-env": "7.26.9",
     "@babel/preset-typescript": "7.27.0",

package/utils/index.ts

@@ -1,6 +1,7 @@
 import settings from 'settings';
 import { LocaleUrlStrategy } from '../localization';
 import { CDNOptions, ClientRequestOptions } from '../types';
+import getRootHostname from './get-root-hostname';
 
 export * from './get-currency';
 export * from './menu-generator';
@@ -20,14 +21,29 @@ export function getCookie(name: string) {
   }
 }
 
-export function setCookie(name: string, val: string) {
-  const date = new Date();
-  const value = val;
-
-  date.setTime(date.getTime() + 7 * 24 * 60 * 60 * 1000);
-
-  document.cookie =
-    name + '=' + value + '; expires=' + date.toUTCString() + '; path=/';
+export function setCookie(name: string, value: string) {
+  const WEEK_IN_MS = 7 * 24 * 60 * 60 * 1000;
+  const hostname = process.env.NEXT_PUBLIC_URL || '';
+  const domain =
+    localeUrlStrategy === LocaleUrlStrategy.Subdomain
+      ? getRootHostname(hostname)
+      : null;
+  const domainStr = domain ? `Domain=${domain}` : '';
+  const expiryDate = new Date(Date.now() + WEEK_IN_MS);
+  const isSecure = hostname.startsWith('https://');
+
+  const cookieParts = [
+    `${name}=${value}`,
+    `Eexpires=${expiryDate.toUTCString()}`,
+    `Path=/`,
+    `SameSite=lax`,
+    `Secure=${isSecure}`,
+    domainStr
+  ].filter(Boolean);
+
+  const cookieString = cookieParts.join('; ');
+
+  document.cookie = cookieString;
 }
 
 export function removeCookie(name: string) {