acrylblends 0.2.0 → 0.4.0

package/plugins/acryl-router/src/core/helper/cookie/index.test.ts

@@ -0,0 +1,510 @@
+import {
+  deleteCookie,
+  getCookie,
+  getSignedCookie,
+  setCookie,
+  setSignedCookie,
+  generateCookie,
+  generateSignedCookie,
+} from './index.ts'
+import { App } from '../../app.ts'
+
+describe('Cookie Middleware', () => {
+  describe('Parse cookie', () => {
+    const apps: Record<string, App> = {}
+    apps['get by name'] = (() => {
+      const app = new App()
+
+      app.get('/cookie', (c) => {
+        const yummyCookie = getCookie(c, 'yummy_cookie')
+        const tastyCookie = getCookie(c, 'tasty_cookie')
+        const res = new Response('Good cookie')
+        if (yummyCookie && tastyCookie) {
+          res.headers.set('Yummy-Cookie', yummyCookie)
+          res.headers.set('Tasty-Cookie', tastyCookie)
+        }
+        return res
+      })
+
+      return app
+    })()
+
+    apps['get all as an object'] = (() => {
+      const app = new App()
+
+      app.get('/cookie', (c) => {
+        const { yummy_cookie: yummyCookie, tasty_cookie: tastyCookie } = getCookie(c)
+        const res = new Response('Good cookie')
+        res.headers.set('Yummy-Cookie', yummyCookie)
+        res.headers.set('Tasty-Cookie', tastyCookie)
+        return res
+      })
+
+      return app
+    })()
+
+    describe.each(Object.keys(apps))('%s', (name) => {
+      const app = apps[name]
+      it('Parse cookie with getCookie()', async () => {
+        const req = new Request('http://localhost/cookie')
+        const cookieString = 'yummy_cookie=choco; tasty_cookie = strawberry'
+        req.headers.set('Cookie', cookieString)
+        const res = await app.request(req)
+
+        expect(res.headers.get('Yummy-Cookie')).toBe('choco')
+        expect(res.headers.get('Tasty-Cookie')).toBe('strawberry')
+      })
+    })
+
+    const app = new App()
+
+    app.get('/cookie-signed-get-all', async (c) => {
+      const secret = 'secret lucky charm'
+      const { fortune_cookie: fortuneCookie, fruit_cookie: fruitCookie } = await getSignedCookie(
+        c,
+        secret
+      )
+      const res = new Response('Signed fortune cookie')
+      if (typeof fortuneCookie !== 'undefined' && typeof fruitCookie !== 'undefined') {
+        // just examples for tests sake
+        res.headers.set('Fortune-Cookie', fortuneCookie === false ? 'INVALID' : fortuneCookie)
+        res.headers.set('Fruit-Cookie', fruitCookie === false ? 'INVALID' : fruitCookie)
+      }
+      return res
+    })
+
+    app.get('/cookie-signed-get-one', async (c) => {
+      const secret = 'secret lucky charm'
+      const fortuneCookie = await getSignedCookie(c, secret, 'fortune_cookie')
+      const res = new Response('Signed fortune cookie')
+      if (typeof fortuneCookie !== 'undefined') {
+        // just an example for tests sake
+        res.headers.set('Fortune-Cookie', fortuneCookie === false ? 'INVALID' : fortuneCookie)
+      }
+      return res
+    })
+
+    it('Get signed cookies', async () => {
+      const req = new Request('http://localhost/cookie-signed-get-all')
+      const cookieString =
+        'fortune_cookie=lots-of-money.UO6vMygDM6NCDU4LdvBnzdVb2Xcdj+h+ZTnmS8X7iH8%3D; fruit_cookie=mango.lRwgtW9ooM9%2Fd9ZZA%2FInNRG64CbQsfWGXQyFLPM9520%3D'
+      req.headers.set('Cookie', cookieString)
+      const res = await app.request(req)
+      expect(res.headers.get('Fortune-Cookie')).toBe('lots-of-money')
+      expect(res.headers.get('Fruit-Cookie')).toBe('mango')
+    })
+
+    it('Get signed cookies invalid signature', async () => {
+      const req = new Request('http://localhost/cookie-signed-get-all')
+      // fruit_cookie has invalid signature
+      const cookieString =
+        'fortune_cookie=lots-of-money.UO6vMygDM6NCDU4LdvBnzdVb2Xcdj+h+ZTnmS8X7iH8%3D; fruit_cookie=mango.LAa7RX43t2vCrLNcKmNG65H41OkyV02sraRPuY5RuVg%3D'
+      req.headers.set('Cookie', cookieString)
+      const res = await app.request(req)
+      expect(res.headers.get('Fortune-Cookie')).toBe('lots-of-money')
+      expect(res.headers.get('Fruit-Cookie')).toBe('INVALID')
+    })
+
+    it('Get signed cookie', async () => {
+      const req = new Request('http://localhost/cookie-signed-get-one')
+      const cookieString =
+        'fortune_cookie=lots-of-money.UO6vMygDM6NCDU4LdvBnzdVb2Xcdj+h+ZTnmS8X7iH8%3D; fruit_cookie=mango.lRwgtW9ooM9%2Fd9ZZA%2FInNRG64CbQsfWGXQyFLPM9520%3D'
+      req.headers.set('Cookie', cookieString)
+      const res = await app.request(req)
+      expect(res.headers.get('Fortune-Cookie')).toBe('lots-of-money')
+    })
+
+    it('Get signed cookie with invalid signature', async () => {
+      const req = new Request('http://localhost/cookie-signed-get-one')
+      // fortune_cookie has invalid signature
+      const cookieString =
+        'fortune_cookie=lots-of-money.LAa7RX43t2vCrLNcKmNG65H41OkyV02sraRPuY5RuVg=; fruit_cookie=mango.lRwgtW9ooM9%2Fd9ZZA%2FInNRG64CbQsfWGXQyFLPM9520%3D'
+      req.headers.set('Cookie', cookieString)
+      const res = await app.request(req)
+      expect(res.headers.get('Fortune-Cookie')).toBe('INVALID')
+    })
+
+    it('Get signed cookie with empty string value', async () => {
+      const secret = 'secret lucky charm'
+      const emptySignedCookie = await generateSignedCookie('fortune_cookie', '', secret)
+      const req = new Request('http://localhost/cookie-signed-get-one')
+      req.headers.set('Cookie', emptySignedCookie)
+      const res = await app.request(req)
+      expect(res.headers.get('Fortune-Cookie')).toBe('')
+    })
+
+    describe('get null if the value is undefined', () => {
+      const app = new App()
+
+      app.get('/cookie', (c) => {
+        const yummyCookie = getCookie(c, 'yummy_cookie')
+        const res = new Response('Good cookie')
+        if (yummyCookie) {
+          res.headers.set('Yummy-Cookie', yummyCookie)
+        }
+        return res
+      })
+
+      it('Should be null', async () => {
+        const req = new Request('http://localhost/cookie')
+        const cookieString = 'yummy_cookie='
+        req.headers.set('Cookie', cookieString)
+        const res = await app.request(req)
+        expect(res.headers.get('Yummy-Cookie')).toBe(null)
+      })
+    })
+  })
+
+  describe('Set cookie', () => {
+    const app = new App()
+
+    app.get('/set-cookie', (c) => {
+      setCookie(c, 'delicious_cookie', 'macha')
+      return c.text('Give cookie')
+    })
+
+    it('Set cookie with setCookie()', async () => {
+      const res = await app.request('http://localhost/set-cookie')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe('delicious_cookie=macha; Path=/')
+    })
+
+    app.get('/a/set-cookie-path', (c) => {
+      setCookie(c, 'delicious_cookie', 'macha', { path: '/a' })
+      return c.text('Give cookie')
+    })
+
+    it('Set cookie with setCookie() and path option', async () => {
+      const res = await app.request('http://localhost/a/set-cookie-path')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe('delicious_cookie=macha; Path=/a')
+    })
+
+    app.get('/set-signed-cookie', async (c) => {
+      const secret = 'secret chocolate chips'
+      await setSignedCookie(c, 'delicious_cookie', 'macha', secret)
+      return c.text('Give signed cookie')
+    })
+
+    it('Set signed cookie with setSignedCookie()', async () => {
+      const res = await app.request('http://localhost/set-signed-cookie')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe(
+        'delicious_cookie=macha.diubJPY8O7hI1pLa42QSfkPiyDWQ0I4DnlACH%2FN2HaA%3D; Path=/'
+      )
+    })
+
+    app.get('/a/set-signed-cookie-path', async (c) => {
+      const secret = 'secret chocolate chips'
+      await setSignedCookie(c, 'delicious_cookie', 'macha', secret, { path: '/a' })
+      return c.text('Give signed cookie')
+    })
+
+    it('Set signed cookie with setSignedCookie() and path option', async () => {
+      const res = await app.request('http://localhost/a/set-signed-cookie-path')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe(
+        'delicious_cookie=macha.diubJPY8O7hI1pLa42QSfkPiyDWQ0I4DnlACH%2FN2HaA%3D; Path=/a'
+      )
+    })
+
+    app.get('/get-secure-prefix-cookie', async (c) => {
+      const cookie = getCookie(c, 'delicious_cookie', 'secure')
+      if (cookie) {
+        return c.text(cookie)
+      } else {
+        return c.notFound()
+      }
+    })
+
+    app.get('/get-host-prefix-cookie', async (c) => {
+      const cookie = getCookie(c, 'delicious_cookie', 'host')
+      if (cookie) {
+        return c.text(cookie)
+      } else {
+        return c.notFound()
+      }
+    })
+
+    app.get('/set-secure-prefix-cookie', (c) => {
+      setCookie(c, 'delicious_cookie', 'macha', {
+        prefix: 'secure',
+        secure: false, // this will be ignore
+      })
+      return c.text('Set secure prefix cookie')
+    })
+
+    it('Set cookie with secure prefix', async () => {
+      const res = await app.request('http://localhost/set-secure-prefix-cookie')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe('__Secure-delicious_cookie=macha; Path=/; Secure')
+    })
+
+    it('Get cookie with secure prefix', async () => {
+      const setCookie = await app.request('http://localhost/set-secure-prefix-cookie')
+      const header = setCookie.headers.get('Set-Cookie')
+      if (!header) {
+        assert.fail('invalid header')
+      }
+      const res = await app.request('http://localhost/get-secure-prefix-cookie', {
+        headers: {
+          Cookie: header,
+        },
+      })
+      const response = await res.text()
+      expect(res.status).toBe(200)
+      expect(response).toBe('macha')
+    })
+
+    app.get('/set-host-prefix-cookie', (c) => {
+      setCookie(c, 'delicious_cookie', 'macha', {
+        prefix: 'host',
+        path: '/foo', // this will be ignored
+        domain: 'example.com', // this will be ignored
+        secure: false, // this will be ignored
+      })
+      return c.text('Set host prefix cookie')
+    })
+
+    it('Set cookie with host prefix', async () => {
+      const res = await app.request('http://localhost/set-host-prefix-cookie')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe('__Host-delicious_cookie=macha; Path=/; Secure')
+    })
+
+    it('Get cookie with host prefix', async () => {
+      const setCookie = await app.request('http://localhost/set-host-prefix-cookie')
+      const header = setCookie.headers.get('Set-Cookie')
+      if (!header) {
+        assert.fail('invalid header')
+      }
+      const res = await app.request('http://localhost/get-host-prefix-cookie', {
+        headers: {
+          Cookie: header,
+        },
+      })
+      const response = await res.text()
+      expect(res.status).toBe(200)
+      expect(response).toBe('macha')
+    })
+
+    app.get('/set-signed-secure-prefix-cookie', async (c) => {
+      await setSignedCookie(c, 'delicious_cookie', 'macha', 'secret choco chips', {
+        prefix: 'secure',
+      })
+      return c.text('Set secure prefix cookie')
+    })
+
+    it('Set signed cookie with secure prefix', async () => {
+      const res = await app.request('http://localhost/set-signed-secure-prefix-cookie')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe(
+        '__Secure-delicious_cookie=macha.i225faTyCrJUY8TvpTuJHI20HBWbQ89B4GV7lT4E%2FB0%3D; Path=/; Secure'
+      )
+    })
+
+    app.get('/set-signed-host-prefix-cookie', async (c) => {
+      await setSignedCookie(c, 'delicious_cookie', 'macha', 'secret choco chips', {
+        prefix: 'host',
+        domain: 'example.com', // this will be ignored
+        path: 'example.com', // this will be ignored
+        secure: false, // this will be ignored
+      })
+      return c.text('Set host prefix cookie')
+    })
+
+    it('Set signed cookie with host prefix', async () => {
+      const res = await app.request('http://localhost/set-signed-host-prefix-cookie')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe(
+        '__Host-delicious_cookie=macha.i225faTyCrJUY8TvpTuJHI20HBWbQ89B4GV7lT4E%2FB0%3D; Path=/; Secure'
+      )
+    })
+
+    app.get('/set-cookie-complex', (c) => {
+      setCookie(c, 'great_cookie', 'banana', {
+        path: '/',
+        secure: true,
+        domain: 'example.com',
+        httpOnly: true,
+        maxAge: 1000,
+        expires: new Date(Date.UTC(2000, 11, 24, 10, 30, 59, 900)),
+        sameSite: 'Strict',
+      })
+      return c.text('Give cookie')
+    })
+
+    it('Complex pattern', async () => {
+      const res = await app.request('http://localhost/set-cookie-complex')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe(
+        'great_cookie=banana; Max-Age=1000; Domain=example.com; Path=/; Expires=Sun, 24 Dec 2000 10:30:59 GMT; HttpOnly; Secure; SameSite=Strict'
+      )
+    })
+
+    app.get('/set-signed-cookie-complex', async (c) => {
+      const secret = 'secret chocolate chips'
+      await setSignedCookie(c, 'great_cookie', 'banana', secret, {
+        path: '/',
+        secure: true,
+        domain: 'example.com',
+        httpOnly: true,
+        maxAge: 1000,
+        expires: new Date(Date.UTC(2000, 11, 24, 10, 30, 59, 900)),
+        sameSite: 'Strict',
+      })
+      return c.text('Give signed cookie')
+    })
+
+    it('Complex pattern (signed)', async () => {
+      const res = await app.request('http://localhost/set-signed-cookie-complex')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe(
+        'great_cookie=banana.hSo6gB7YT2db0WBiEAakEmh7dtwEL0DSp76G23WvHuQ%3D; Max-Age=1000; Domain=example.com; Path=/; Expires=Sun, 24 Dec 2000 10:30:59 GMT; HttpOnly; Secure; SameSite=Strict'
+      )
+    })
+
+    app.get('/set-cookie-multiple', (c) => {
+      setCookie(c, 'delicious_cookie', 'macha')
+      setCookie(c, 'delicious_cookie', 'choco')
+      return c.text('Give cookie')
+    })
+
+    it('Multiple values', async () => {
+      const res = await app.request('http://localhost/set-cookie-multiple')
+      expect(res.status).toBe(200)
+      const header = res.headers.get('Set-Cookie')
+      expect(header).toBe('delicious_cookie=macha; Path=/, delicious_cookie=choco; Path=/')
+    })
+  })
+
+  describe('Delete cookie', () => {
+    const app = new App()
+
+    app.get('/delete-cookie', (c) => {
+      deleteCookie(c, 'delicious_cookie')
+      return c.text('Give cookie')
+    })
+
+    it('Delete cookie', async () => {
+      const res2 = await app.request('http://localhost/delete-cookie')
+      expect(res2.status).toBe(200)
+      const header2 = res2.headers.get('Set-Cookie')
+      expect(header2).toBe('delicious_cookie=; Max-Age=0; Path=/')
+    })
+
+    app.get('/delete-cookie-multiple', (c) => {
+      deleteCookie(c, 'delicious_cookie')
+      deleteCookie(c, 'delicious_cookie2')
+      return c.text('Give cookie')
+    })
+
+    it('Delete multiple cookies', async () => {
+      const res2 = await app.request('http://localhost/delete-cookie-multiple')
+      expect(res2.status).toBe(200)
+      const header2 = res2.headers.get('Set-Cookie')
+      expect(header2).toBe(
+        'delicious_cookie=; Max-Age=0; Path=/, delicious_cookie2=; Max-Age=0; Path=/'
+      )
+    })
+
+    app.get('/delete-cookie-with-options', (c) => {
+      deleteCookie(c, 'delicious_cookie', {
+        path: '/',
+        secure: true,
+        domain: 'example.com',
+      })
+      return c.text('Give cookie')
+    })
+
+    it('Delete cookie with options', async () => {
+      const res2 = await app.request('http://localhost/delete-cookie-with-options')
+      expect(res2.status).toBe(200)
+      const header2 = res2.headers.get('Set-Cookie')
+      expect(header2).toBe('delicious_cookie=; Max-Age=0; Domain=example.com; Path=/; Secure')
+    })
+
+    app.get('/delete-cookie-with-deleted-value', (c) => {
+      const deleted = deleteCookie(c, 'delicious_cookie')
+      return c.text(deleted || '')
+    })
+
+    it('Get deleted value', async () => {
+      const cookieString = 'delicious_cookie=choco'
+      const req = new Request('http://localhost/delete-cookie-with-deleted-value')
+      req.headers.set('Cookie', cookieString)
+      const res = await app.request(req)
+      expect(res.status).toBe(200)
+      expect(await res.text()).toBe('choco')
+    })
+
+    app.get('/delete-cookie-with-prefix', (c) => {
+      const deleted = deleteCookie(c, 'delicious_cookie', { prefix: 'secure' })
+      return c.text(deleted || '')
+    })
+
+    it('Get deleted value with prefix', async () => {
+      const cookieString = '__Secure-delicious_cookie=choco'
+      const req = new Request('http://localhost/delete-cookie-with-prefix')
+      req.headers.set('Cookie', cookieString)
+      const res = await app.request(req)
+      expect(res.status).toBe(200)
+      expect(await res.text()).toBe('choco')
+    })
+  })
+
+  describe('Generate cookie', () => {
+    it('should generate a cookie', () => {
+      const cookie = generateCookie('delicious_cookie', 'macha')
+      expect(cookie).toBe('delicious_cookie=macha; Path=/')
+    })
+
+    it('should generate a cookie with options', () => {
+      const cookie = generateCookie('delicious_cookie', 'macha', {
+        path: '/',
+        secure: true,
+        httpOnly: true,
+        domain: 'example.com',
+      })
+      expect(cookie).toBe('delicious_cookie=macha; Domain=example.com; Path=/; HttpOnly; Secure')
+    })
+
+    it('should generate a signed cookie', async () => {
+      const cookie = await generateSignedCookie(
+        'delicious_cookie',
+        'macha',
+        'secret chocolate chips'
+      )
+      expect(cookie).toBe(
+        'delicious_cookie=macha.diubJPY8O7hI1pLa42QSfkPiyDWQ0I4DnlACH%2FN2HaA%3D; Path=/'
+      )
+    })
+
+    it('should generate a signed cookie with options', async () => {
+      const cookie = await generateSignedCookie(
+        'delicious_cookie',
+        'macha',
+        'secret chocolate chips',
+        {
+          path: '/',
+          secure: true,
+          httpOnly: true,
+          domain: 'example.com',
+        }
+      )
+      expect(cookie).toBe(
+        'delicious_cookie=macha.diubJPY8O7hI1pLa42QSfkPiyDWQ0I4DnlACH%2FN2HaA%3D; Domain=example.com; Path=/; HttpOnly; Secure'
+      )
+    })
+  })
+})

package/plugins/acryl-router/src/core/helper/cookie/index.ts

@@ -0,0 +1,146 @@
+/**
+ * @module
+ * Cookie Helper for App.
+ */
+
+import type { Context } from '../../context.ts'
+import { parse, parseSigned, serialize, serializeSigned } from '../../utils/cookie.ts'
+import type { Cookie, CookieOptions, CookiePrefixOptions, SignedCookie } from '../../utils/cookie.ts'
+import type { BufferSource } from '../../utils/types.ts'
+
+interface GetCookie {
+  (c: Context, key: string): string | undefined
+  (c: Context): Cookie
+  (c: Context, key: string, prefixOptions?: CookiePrefixOptions): string | undefined
+}
+
+interface GetSignedCookie {
+  (c: Context, secret: string | BufferSource, key: string): Promise<string | undefined | false>
+  (c: Context, secret: string | BufferSource): Promise<SignedCookie>
+  (
+    c: Context,
+    secret: string | BufferSource,
+    key: string,
+    prefixOptions?: CookiePrefixOptions
+  ): Promise<string | undefined | false>
+}
+
+export const getCookie: GetCookie = (c, key?, prefix?: CookiePrefixOptions) => {
+  const cookie = c.req.raw.headers.get('Cookie')
+  if (typeof key === 'string') {
+    if (!cookie) {
+      return undefined
+    }
+    let finalKey = key
+    if (prefix === 'secure') {
+      finalKey = '__Secure-' + key
+    } else if (prefix === 'host') {
+      finalKey = '__Host-' + key
+    }
+    const obj = parse(cookie, finalKey)
+    return obj[finalKey]
+  }
+  if (!cookie) {
+    return {}
+  }
+  const obj = parse(cookie)
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  return obj as any
+}
+
+export const getSignedCookie: GetSignedCookie = async (
+  c,
+  secret,
+  key?,
+  prefix?: CookiePrefixOptions
+) => {
+  const cookie = c.req.raw.headers.get('Cookie')
+  if (typeof key === 'string') {
+    if (!cookie) {
+      return undefined
+    }
+    let finalKey = key
+    if (prefix === 'secure') {
+      finalKey = '__Secure-' + key
+    } else if (prefix === 'host') {
+      finalKey = '__Host-' + key
+    }
+    const obj = await parseSigned(cookie, secret, finalKey)
+    return obj[finalKey]
+  }
+  if (!cookie) {
+    return {}
+  }
+  const obj = await parseSigned(cookie, secret)
+  // eslint-disable-next-line @typescript-eslint/no-explicit-any
+  return obj as any
+}
+
+export const generateCookie = (name: string, value: string, opt?: CookieOptions): string => {
+  // Cookie names prefixed with __Secure- can be used only if they are set with the secure attribute.
+  // Cookie names prefixed with __Host- can be used only if they are set with the secure attribute, must have a path of / (meaning any path at the host)
+  // and must not have a Domain attribute.
+  // Read more at https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#cookie_prefixes'
+  let cookie
+  if (opt?.prefix === 'secure') {
+    cookie = serialize('__Secure-' + name, value, { path: '/', ...opt, secure: true })
+  } else if (opt?.prefix === 'host') {
+    cookie = serialize('__Host-' + name, value, {
+      ...opt,
+      path: '/',
+      secure: true,
+      domain: undefined,
+    })
+  } else {
+    cookie = serialize(name, value, { path: '/', ...opt })
+  }
+  return cookie
+}
+
+export const setCookie = (c: Context, name: string, value: string, opt?: CookieOptions): void => {
+  const cookie = generateCookie(name, value, opt)
+  c.header('Set-Cookie', cookie, { append: true })
+}
+
+export const generateSignedCookie = async (
+  name: string,
+  value: string,
+  secret: string | BufferSource,
+  opt?: CookieOptions
+): Promise<string> => {
+  let cookie
+  if (opt?.prefix === 'secure') {
+    cookie = await serializeSigned('__Secure-' + name, value, secret, {
+      path: '/',
+      ...opt,
+      secure: true,
+    })
+  } else if (opt?.prefix === 'host') {
+    cookie = await serializeSigned('__Host-' + name, value, secret, {
+      ...opt,
+      path: '/',
+      secure: true,
+      domain: undefined,
+    })
+  } else {
+    cookie = await serializeSigned(name, value, secret, { path: '/', ...opt })
+  }
+  return cookie
+}
+
+export const setSignedCookie = async (
+  c: Context,
+  name: string,
+  value: string,
+  secret: string | BufferSource,
+  opt?: CookieOptions
+): Promise<void> => {
+  const cookie = await generateSignedCookie(name, value, secret, opt)
+  c.header('set-cookie', cookie, { append: true })
+}
+
+export const deleteCookie = (c: Context, name: string, opt?: CookieOptions): string | undefined => {
+  const deletedCookie = getCookie(c, name, opt?.prefix)
+  setCookie(c, name, '', { ...opt, maxAge: 0 })
+  return deletedCookie
+}