@fastify/cookie 9.0.0 → 9.0.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fastify/cookie",
-  "version": "9.0.0",
+  "version": "9.0.2",
   "description": "Plugin for fastify to add support for cookies",
   "main": "plugin.js",
   "types": "types/plugin.d.ts",

package/plugin.js

@@ -6,6 +6,7 @@ const cookie = require('cookie')
 const { Signer, sign, unsign } = require('./signer')
 
 const kReplySetCookies = Symbol('fastify.reply.setCookies')
+const kReplySetCookiesHookRan = Symbol('fastify.reply.setCookiesHookRan')
 
 function fastifyCookieSetCookie (reply, name, value, options) {
   const opts = Object.assign({}, options)
@@ -29,6 +30,10 @@ function fastifyCookieSetCookie (reply, name, value, options) {
 
   reply[kReplySetCookies].set(`${name};${opts.domain};${opts.path || '/'}`, { name, value, opts })
 
+  if (reply[kReplySetCookiesHookRan]) {
+    setCookies(reply)
+  }
+
   return reply
 }
 
@@ -63,33 +68,43 @@ function onReqHandlerWrapper (fastify, hook) {
     }
 }
 
-function fastifyCookieOnSendHandler (fastifyReq, fastifyRes, payload, done) {
-  if (fastifyRes[kReplySetCookies].size) {
-    let setCookie = fastifyRes.getHeader('Set-Cookie')
-
-    /* istanbul ignore else */
-    if (setCookie === undefined) {
-      if (fastifyRes[kReplySetCookies].size === 1) {
-        for (const c of fastifyRes[kReplySetCookies].values()) {
-          fastifyRes.header('Set-Cookie', cookie.serialize(c.name, c.value, c.opts))
-        }
+function setCookies (reply) {
+  let setCookie = reply.getHeader('Set-Cookie')
+  const setCookieIsUndefined = setCookie === undefined
 
-        return done()
+  /* istanbul ignore else */
+  if (setCookieIsUndefined) {
+    if (reply[kReplySetCookies].size === 1) {
+      for (const c of reply[kReplySetCookies].values()) {
+        reply.header('Set-Cookie', cookie.serialize(c.name, c.value, c.opts))
       }
 
-      setCookie = []
-    } else if (typeof setCookie === 'string') {
-      setCookie = [setCookie]
-    }
+      reply[kReplySetCookies].clear()
 
-    for (const c of fastifyRes[kReplySetCookies].values()) {
-      setCookie.push(cookie.serialize(c.name, c.value, c.opts))
+      return
     }
 
-    fastifyRes.removeHeader('Set-Cookie')
-    fastifyRes.header('Set-Cookie', setCookie)
+    setCookie = []
+  } else if (typeof setCookie === 'string') {
+    setCookie = [setCookie]
+  }
+
+  for (const c of reply[kReplySetCookies].values()) {
+    setCookie.push(cookie.serialize(c.name, c.value, c.opts))
   }
 
+  if (!setCookieIsUndefined) reply.removeHeader('Set-Cookie')
+  reply.header('Set-Cookie', setCookie)
+  reply[kReplySetCookies].clear()
+}
+
+function fastifyCookieOnSendHandler (fastifyReq, fastifyRes, payload, done) {
+  if (fastifyRes[kReplySetCookies].size) {
+    setCookies(fastifyRes)
+  }
+
+  fastifyRes[kReplySetCookiesHookRan] = true
+
   done()
 }
 
@@ -130,6 +145,7 @@ function plugin (fastify, options, next) {
 
   fastify.decorateRequest('cookies', null)
   fastify.decorateReply(kReplySetCookies, null)
+  fastify.decorateReply(kReplySetCookiesHookRan, false)
 
   fastify.decorateReply('cookie', setCookie)
   fastify.decorateReply('setCookie', setCookie)

package/signer.js

@@ -24,7 +24,8 @@ function Signer (secrets, algorithm = 'sha256') {
 }
 
 function validateSecrets (secrets) {
-  for (const secret of secrets) {
+  for (let i = 0; i < secrets.length; ++i) {
+    const secret = secrets[i]
     if (typeof secret !== 'string' && Buffer.isBuffer(secret) === false) {
       throw new TypeError('Secret key must be a string or Buffer.')
     }
@@ -59,7 +60,8 @@ function _unsign (signedValue, secrets, algorithm) {
   const value = signedValue.slice(0, signedValue.lastIndexOf('.'))
   const actual = Buffer.from(signedValue.slice(signedValue.lastIndexOf('.') + 1))
 
-  for (const secret of secrets) {
+  for (let i = 0; i < secrets.length; ++i) {
+    const secret = secrets[i]
     const expected = Buffer.from(crypto
       .createHmac(algorithm, secret)
       .update(value)

package/test/cookie.test.js

@@ -1156,3 +1156,73 @@ test('should update a cookie value when setCookie is called multiple times (non-
     t.ok(new Date(cookies[1].expires) < new Date())
   })
 })
+
+test('cookies get set correctly if set inside onSend', (t) => {
+  t.plan(7)
+  const fastify = Fastify()
+  fastify.register(plugin)
+
+  fastify.addHook('onSend', async (req, reply, payload) => {
+    reply.setCookie('foo', 'foo', { path: '/' })
+    return payload
+  })
+
+  fastify.get('/test1', (req, reply) => {
+    reply
+      .send({ hello: 'world' })
+  })
+
+  fastify.inject({
+    method: 'GET',
+    url: '/test1'
+  }, (err, res) => {
+    t.error(err)
+    t.equal(res.statusCode, 200)
+    t.same(JSON.parse(res.body), { hello: 'world' })
+
+    const cookies = res.cookies
+    t.equal(cookies.length, 1)
+    t.equal(cookies[0].name, 'foo')
+    t.equal(cookies[0].value, 'foo')
+    t.equal(cookies[0].path, '/')
+  })
+})
+
+test('cookies get set correctly if set inside multiple onSends', (t) => {
+  t.plan(10)
+  const fastify = Fastify()
+  fastify.register(plugin)
+
+  fastify.addHook('onSend', async (req, reply, payload) => {
+    reply.setCookie('foo', 'foo', { path: '/' })
+  })
+
+  fastify.addHook('onSend', async (req, reply, payload) => {
+    reply.setCookie('foo', 'foos', { path: '/' })
+    return payload
+  })
+
+  fastify.get('/test1', (req, reply) => {
+    reply
+      .send({ hello: 'world' })
+  })
+
+  fastify.inject({
+    method: 'GET',
+    url: '/test1'
+  }, (err, res) => {
+    t.error(err)
+    t.equal(res.statusCode, 200)
+    t.same(JSON.parse(res.body), { hello: 'world' })
+
+    const cookies = res.cookies
+    t.equal(cookies.length, 2)
+    t.equal(cookies[0].name, 'foo')
+    t.equal(cookies[0].value, 'foo')
+    t.equal(cookies[0].path, '/')
+
+    t.equal(cookies[1].name, 'foo')
+    t.equal(cookies[1].value, 'foos')
+    t.equal(cookies[1].path, '/')
+  })
+})