ngx-cookie-service 22.0.0 → 22.2.0

package/README.md

@@ -148,6 +148,9 @@ server.get('*', (req, res) => {
    use `REQUEST.cookies` to access the
    cookies in SSR. Then proceed to use `ngx-cookie-service` as usual.
 4. See the [sample repo](https://github.com/pavankjadda/angular-ssr-docker) for more details.
+5. On the server, `get()`, `check()` and `getAll()` also see cookies set or deleted earlier while rendering the same
+   request, whatever their `path` or `domain`. Cookies with `httpOnly: true` can only be set on the server; in the
+   browser the call is skipped with a console warning.
 
 ## Demo
 
@@ -212,17 +215,27 @@ to `Lax`.
 Read [this](https://stackoverflow.com/a/1063760) and [this](https://stackoverflow.com/a/17777005/1007003) StackOverflow
 answer for a more in-depth explanation.
 
-**Important:** Browsers do not accept cookies flagged sameSite = 'None' if secure flag isn't set as well. CookieService
-will override the secure flag to true if sameSite='None'.
+**Important:** Browsers do not accept cookies flagged sameSite = 'None' or partitioned unless the secure flag is set as
+well. CookieService will override the secure flag to true if sameSite='None' or partitioned is true.
+
+If `path` or `domain` contains `;` or a control character, the cookie is not written or deleted, and a warning is
+logged to the console. An invalid `expires` or `sameSite` value is ignored with a warning.
 
 ## delete( name: string, path?: string, domain?: string, secure?: boolean, sameSite: 'Lax' | 'None' | 'Strict' = 'Lax'): void;
 
+## delete( name: string, options?: { path?: string, domain?: string, secure?: boolean, sameSite?: 'Lax' | 'None' | 'Strict', partitioned?: boolean }): void;
+
 ```typescript
 cookieService.delete('test');
+cookieService.delete('test', { path: '/', secure: true, sameSite: 'None', partitioned: true });
 ```
 
-Deletes a cookie with the specified `name`. It is best practice to always define a path. If you are unsure about the
-path value, use `'/'`.
+Deletes a cookie with the specified `name`. The attributes must match the ones the cookie was set with: `path` and
+`domain` select the cookie, and `partitioned: true` is needed to delete a Partitioned cookie.
+
+It is best practice to always define a path. If you are unsure about the path value, use `'/'`. Without a path, the
+browser uses the directory of the URL the page was loaded at, so in a single-page app the result depends on the URL the
+user first landed on.
 
 **Important:** For security reasons, it is not possible to delete cookies for other domains. Browsers do not allow this.
 Read [this](https://stackoverflow.com/a/1063760) and [this](https://stackoverflow.com/a/17777005/1007003) StackOverflow
@@ -230,12 +243,54 @@ answer for a more in-depth explanation.
 
 ## deleteAll( path?: string, domain?: string, secure?: boolean, sameSite: 'Lax' | 'None' | 'Strict' = 'Lax' ): void;
 
+## deleteAll( options?: { path?: string, domain?: string, secure?: boolean, sameSite?: 'Lax' | 'None' | 'Strict', partitioned?: boolean }): void;
+
 ```typescript
 cookieService.deleteAll();
+cookieService.deleteAll({ path: '/' });
+```
+
+Deletes all cookies that can currently be accessed, using the same attributes for each one. It is best practice to
+always define a path. If you are unsure about the path value, use `'/'`.
+
+## provideCookieOptions( options: CookieOptions ): EnvironmentProviders;
+
+```typescript
+// app.config.ts
+import { provideCookieOptions } from 'ngx-cookie-service'; // or 'ngx-cookie-service-ssr'
+
+export const appConfig: ApplicationConfig = {
+  providers: [provideCookieOptions({ path: '/', secure: true, sameSite: 'Strict' })],
+};
 ```
 
-Deletes all cookies that can currently be accessed. It is best practice to always define a path. If you are unsure about
-the path value, use `'/'`.
+Sets default options for every `set()`, `delete()` and `deleteAll()` call, so you don't have to repeat them. Options
+passed to a call win over the defaults, and `undefined` values don't override them. A call that passes its own `expires`
+(or `maxAge` in `ngx-cookie-service-ssr`) replaces the default lifetime, so `delete()` always expires the cookie.
+
+Setting `path: '/'` here is recommended. Without a path, the browser uses the directory of the URL the page was loaded
+at, so the same code can read or delete different cookies depending on where the user landed.
+
+## provideCookieEncoding( encoding: 'uri' | 'minimal' | CookieCodec ): EnvironmentProviders;
+
+```typescript
+// app.config.ts
+import { provideCookieEncoding } from 'ngx-cookie-service'; // or 'ngx-cookie-service-ssr'
+
+export const appConfig: ApplicationConfig = {
+  providers: [provideCookieEncoding('minimal')],
+};
+```
+
+Sets how cookie values are encoded when they are written and decoded when they are read. Cookie names keep the
+default encoding.
+
+- `'uri'` (default): values are encoded with `encodeURIComponent`, so `ab+/cd==` is stored as `ab%2B%2Fcd%3D%3D`.
+- `'minimal'`: values made only of characters allowed in a cookie value are stored as-is, so `ab+/cd==` stays
+  `ab+/cd==`. Other values fall back to `encodeURIComponent`. Use it when a server reads cookies without URL-decoding
+  them, for example JWT or base64 values. Express encodes cookie values the same way.
+- A custom `{ encode(value, name), decode(value, name) }` object for any other scheme. If the encoded value contains
+  `;` or a control character, the cookie is not written and a warning is logged.
 
 # FAQ
 

package/fesm2022/ngx-cookie-service.mjs

@@ -1,212 +1,233 @@
-import { isPlatformBrowser } from '@angular/common';
-import * as i0 from '@angular/core';
-import { inject, DOCUMENT, PLATFORM_ID, Injectable } from '@angular/core';
-
-class CookieService {
-    constructor() {
-        this.document = inject(DOCUMENT);
-        this.platformId = inject(PLATFORM_ID);
-        this.documentIsAccessible = isPlatformBrowser(this.platformId);
-    }
-    /**
-     * Get cookie Regular Expression
-     *
-     * @param name Cookie name
-     * @returns property RegExp
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    static getCookieRegExp(name) {
-        const escapedName = name.replace(/([[\]{}()|=;+?,.*^$\\])/gi, '\\$1');
-        return new RegExp('(?:^' + escapedName + '|;\\s*' + escapedName + ')=(.*?)(?:;|$)');
-    }
-    /**
-     * Gets the decoded version of an encoded component of a Uniform Resource Identifier (URI).
-     *
-     * @param encodedURIComponent A value representing an encoded URI component.
-     *
-     * @returns The decoded version of an encoded component of a Uniform Resource Identifier (URI).
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    static safeDecodeURIComponent(encodedURIComponent) {
-        try {
-            return decodeURIComponent(encodedURIComponent);
-        }
-        catch {
-            // probably it is not uri encoded. return as is
-            return encodedURIComponent;
-        }
-    }
-    /**
-     * Return `true` if {@link Document} is accessible, otherwise return `false`
-     *
-     * @param name Cookie name
-     * @returns boolean - whether cookie with specified name exists
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    check(name) {
-        if (!this.documentIsAccessible) {
-            return false;
-        }
-        name = encodeURIComponent(name);
-        const regExp = CookieService.getCookieRegExp(name);
-        return regExp.test(this.document.cookie);
-    }
-    /**
-     * Get cookies by name
-     *
-     * @param name Cookie name
-     * @returns property value
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    get(name) {
-        if (this.check(name)) {
-            name = encodeURIComponent(name);
-            const regExp = CookieService.getCookieRegExp(name);
-            const result = regExp.exec(this.document.cookie);
-            return result?.[1] ? CookieService.safeDecodeURIComponent(result[1]) : '';
-        }
-        else {
-            return '';
-        }
-    }
-    /**
-     * Get all cookies in JSON format
-     *
-     * @returns all the cookies in json
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    getAll() {
-        if (!this.documentIsAccessible) {
-            return {};
-        }
-        const cookies = {};
-        const document = this.document;
-        if (document.cookie && document.cookie !== '') {
-            document.cookie.split(';').forEach((currentCookie) => {
-                const [cookieName, cookieValue] = currentCookie.split('=');
-                cookies[CookieService.safeDecodeURIComponent(cookieName.replace(/^ /, ''))] = CookieService.safeDecodeURIComponent(cookieValue);
-            });
-        }
-        return cookies;
-    }
-    set(name, value, expiresOrOptions, path, domain, secure, sameSite, partitioned) {
-        if (!this.documentIsAccessible) {
-            return;
-        }
-        if (typeof expiresOrOptions === 'number' || expiresOrOptions instanceof Date || path || domain || secure || sameSite) {
-            const optionsBody = {
-                expires: expiresOrOptions,
-                path,
-                domain,
-                secure,
-                sameSite: sameSite || 'Lax',
-                partitioned,
-            };
-            this.set(name, value, optionsBody);
-            return;
-        }
-        let cookieString = encodeURIComponent(name) + '=' + encodeURIComponent(value) + ';';
-        const options = expiresOrOptions ? expiresOrOptions : {};
-        if (options.expires) {
-            if (typeof options.expires === 'number') {
-                const dateExpires = new Date(new Date().getTime() + options.expires * 1000 * 60 * 60 * 24);
-                cookieString += 'Expires=' + dateExpires.toUTCString() + ';';
-            }
-            else {
-                cookieString += 'Expires=' + options.expires.toUTCString() + ';';
-            }
-        }
-        if (options.path) {
-            cookieString += 'Path=' + options.path + ';';
-        }
-        if (options.domain) {
-            cookieString += 'Domain=' + options.domain + ';';
-        }
-        if (options.secure === false && options.sameSite === 'None') {
-            options.secure = true;
-            console.warn(`[ngx-cookie-service] Cookie ${name} was forced with secure flag because sameSite=None.` +
-                `More details : https://github.com/stevermeister/ngx-cookie-service/issues/86#issuecomment-597720130`);
-        }
-        if (options.secure) {
-            cookieString += 'Secure;';
-        }
-        if (!options.sameSite) {
-            options.sameSite = 'Lax';
-        }
-        cookieString += 'SameSite=' + options.sameSite + ';';
-        if (options.partitioned) {
-            cookieString += 'Partitioned;';
-        }
-        this.document.cookie = cookieString;
-    }
-    /**
-     * Delete cookie by name at given path and domain. If not path is not specified, cookie at '/' path will be deleted.
-     *
-     * @param name   Cookie name
-     * @param path   Cookie path
-     * @param domain Cookie domain
-     * @param secure Cookie secure flag
-     * @param sameSite Cookie sameSite flag - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    delete(name, path, domain, secure, sameSite = 'Lax') {
-        if (!this.documentIsAccessible) {
-            return;
-        }
-        const expiresDate = new Date('Thu, 01 Jan 1970 00:00:01 GMT');
-        this.set(name, '', { expires: expiresDate, path, domain, secure, sameSite });
-    }
-    /**
-     * Delete all cookies at given path and domain. If not path is not specified, all cookies at '/' path will be deleted.
-     *
-     * @param path   Cookie path
-     * @param domain Cookie domain
-     * @param secure Is the Cookie secure
-     * @param sameSite Is the cookie same site
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    deleteAll(path, domain, secure, sameSite = 'Lax') {
-        if (!this.documentIsAccessible) {
-            return;
-        }
-        const cookies = this.getAll();
-        for (const cookieName in cookies) {
-            if (cookies.hasOwnProperty(cookieName)) {
-                this.delete(cookieName, path, domain, secure, sameSite);
-            }
-        }
-    }
-    static { this.ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: CookieService, deps: [], target: i0.ɵɵFactoryTarget.Injectable }); }
-    static { this.ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: CookieService, providedIn: 'root' }); }
+import * as i0 from "@angular/core";
+import { DOCUMENT, Injectable, InjectionToken, PLATFORM_ID, inject, makeEnvironmentProviders } from "@angular/core";
+import { isPlatformBrowser } from "@angular/common";
+const COOKIE_OPTIONS = new InjectionToken("ngx-cookie-service default cookie options");
+function provideCookieOptions(options) {
+	return makeEnvironmentProviders([{
+		provide: COOKIE_OPTIONS,
+		useValue: { ...options }
+	}]);
 }
-i0.ɵɵngDeclareClassMetadata({ minVersion: "12.0.0", version: "22.0.0", ngImport: i0, type: CookieService, decorators: [{
-            type: Injectable,
-            args: [{
-                    providedIn: 'root',
-                }]
-        }], ctorParameters: () => [] });
-
-/*
- * Public API Surface of ngx-cookie-service
- */
-
-/**
- * Generated bundle index. Do not edit.
- */
+const COOKIE_ENCODING = new InjectionToken("ngx-cookie-service cookie value encoding");
+function provideCookieEncoding(encoding) {
+	return makeEnvironmentProviders([{
+		provide: COOKIE_ENCODING,
+		useValue: encoding
+	}]);
+}
+const SAME_SITE_VALUES = [
+	"Lax",
+	"Strict",
+	"None"
+];
+const COOKIE_OCTET_REGEXP = /^[!#$&'()*+\-./0-9:<=>?@A-Z[\]^_`a-z{|}~]*$/;
+var CookieService = class CookieService {
+	constructor() {
+		this.document = inject(DOCUMENT);
+		this.platformId = inject(PLATFORM_ID);
+		this.defaultOptions = inject(COOKIE_OPTIONS, { optional: true }) ?? {};
+		this.codec = CookieService.toCodec(inject(COOKIE_ENCODING, { optional: true }));
+		this.documentIsAccessible = isPlatformBrowser(this.platformId);
+	}
+	static getCookieRegExp(name) {
+		const escapedName = name.replace(/([[\]{}()|=;+?,.*^$\\])/gi, "\\$1");
+		return new RegExp("(?:^" + escapedName + "|;\\s*" + escapedName + ")=(.*?)(?:;|$)");
+	}
+	static safeDecodeURIComponent(encodedURIComponent) {
+		try {
+			return decodeURIComponent(encodedURIComponent);
+		} catch {
+			return encodedURIComponent;
+		}
+	}
+	check(name) {
+		if (!this.documentIsAccessible) return false;
+		name = encodeURIComponent(name);
+		return CookieService.getCookieRegExp(name).test(this.document.cookie);
+	}
+	get(name) {
+		if (this.check(name)) {
+			const result = CookieService.getCookieRegExp(encodeURIComponent(name)).exec(this.document.cookie);
+			return result?.[1] ? this.decodeValue(result[1], name) : "";
+		} else return "";
+	}
+	getAll() {
+		if (!this.documentIsAccessible) return {};
+		const cookies = {};
+		const document = this.document;
+		if (document.cookie && document.cookie !== "") document.cookie.split(";").forEach((currentCookie) => {
+			const trimmedCookie = currentCookie.trim();
+			if (!trimmedCookie) return;
+			const equalIndex = trimmedCookie.indexOf("=");
+			if (equalIndex === -1) return;
+			const cookieName = CookieService.safeDecodeURIComponent(trimmedCookie.substring(0, equalIndex));
+			if (Object.hasOwn(cookies, cookieName)) return;
+			Object.defineProperty(cookies, cookieName, {
+				value: this.decodeValue(trimmedCookie.substring(equalIndex + 1), cookieName),
+				enumerable: true,
+				writable: true,
+				configurable: true
+			});
+		});
+		return cookies;
+	}
+	set(name, value, expiresOrOptions, path, domain, secure, sameSite, partitioned) {
+		if (!this.documentIsAccessible) return;
+		if (typeof expiresOrOptions !== "object" || expiresOrOptions === null || expiresOrOptions instanceof Date) {
+			const optionsBody = {
+				expires: expiresOrOptions,
+				path,
+				domain,
+				secure,
+				sameSite,
+				partitioned
+			};
+			this.set(name, value, optionsBody);
+			return;
+		}
+		const options = CookieService.validateOptions(name, CookieService.withDefaults(this.defaultOptions, expiresOrOptions));
+		if (!options) return;
+		const encodedValue = this.encodeValue(name, value);
+		if (encodedValue === void 0) return;
+		let cookieString = encodeURIComponent(name) + "=" + encodedValue + ";";
+		if (options.expires) cookieString += "Expires=" + options.expires.toUTCString() + ";";
+		if (options.path) cookieString += "Path=" + options.path + ";";
+		if (options.domain) cookieString += "Domain=" + options.domain + ";";
+		if (options.sameSite === "None" && !options.secure) {
+			options.secure = true;
+			console.warn(`[ngx-cookie-service] Cookie ${name} was forced with secure flag because sameSite=None.More details : https://github.com/stevermeister/ngx-cookie-service/issues/86#issuecomment-597720130`);
+		}
+		if (options.partitioned && !options.secure) {
+			options.secure = true;
+			console.warn(`[ngx-cookie-service] Cookie ${name} was forced with secure flag because Partitioned cookies must be Secure.`);
+		}
+		if (options.secure) cookieString += "Secure;";
+		if (!options.sameSite) options.sameSite = "Lax";
+		cookieString += "SameSite=" + options.sameSite + ";";
+		if (options.partitioned) cookieString += "Partitioned;";
+		this.document.cookie = cookieString;
+	}
+	delete(name, pathOrOptions, domain, secure, sameSite) {
+		if (!this.documentIsAccessible) return;
+		const options = CookieService.toDeleteOptions(pathOrOptions, domain, secure, sameSite);
+		this.set(name, "", {
+			...options,
+			expires: /* @__PURE__ */ new Date("Thu, 01 Jan 1970 00:00:01 GMT")
+		});
+	}
+	deleteAll(pathOrOptions, domain, secure, sameSite) {
+		if (!this.documentIsAccessible) return;
+		for (const cookieName of Object.keys(this.getAll())) if (typeof pathOrOptions === "object" && pathOrOptions !== null) this.delete(cookieName, pathOrOptions);
+		else this.delete(cookieName, pathOrOptions, domain, secure, sameSite);
+	}
+	static {
+		this.uriCodec = {
+			encode: (value) => encodeURIComponent(value),
+			decode: (value) => CookieService.safeDecodeURIComponent(value)
+		};
+	}
+	static {
+		this.minimalCodec = {
+			encode: (value) => COOKIE_OCTET_REGEXP.test(value) ? value : encodeURIComponent(value),
+			decode: (value) => CookieService.safeDecodeURIComponent(value)
+		};
+	}
+	static toCodec(encoding) {
+		if (encoding === "minimal") return CookieService.minimalCodec;
+		if (typeof encoding === "object" && encoding !== null) return encoding;
+		return CookieService.uriCodec;
+	}
+	encodeValue(name, value) {
+		const encodedValue = this.codec.encode(value, name);
+		if (typeof encodedValue !== "string" || CookieService.hasUnsafeCharacter(encodedValue)) {
+			console.warn(`[ngx-cookie-service] Cookie ${name} was skipped because its encoded value isn't a string without ";" or control characters.`);
+			return;
+		}
+		return encodedValue;
+	}
+	decodeValue(value, name) {
+		try {
+			return this.codec.decode(value, name);
+		} catch {
+			return value;
+		}
+	}
+	static withDefaults(defaults, options = {}) {
+		const merged = { ...defaults };
+		for (const [key, value] of Object.entries(options)) if (value !== void 0 && value !== null) merged[key] = value;
+		return merged;
+	}
+	static validateOptions(name, options = {}) {
+		const { expires, ...valid } = options;
+		const result = valid;
+		for (const attribute of ["path", "domain"]) {
+			const attributeValue = result[attribute];
+			if (typeof attributeValue === "string" && CookieService.hasUnsafeCharacter(attributeValue)) {
+				console.warn(`[ngx-cookie-service] Cookie ${name} was skipped because its ${attribute} contains ";" or a control character.`);
+				return;
+			}
+		}
+		if (expires) {
+			const date = typeof expires === "number" ? new Date(Date.now() + expires * 1e3 * 60 * 60 * 24) : expires;
+			if (date instanceof Date && Number.isFinite(date.getTime())) result.expires = date;
+			else console.warn(`[ngx-cookie-service] Cookie ${name}: ignoring invalid expires value "${String(expires)}".`);
+		}
+		if (result.sameSite !== void 0 && result.sameSite !== null) {
+			const sameSite = SAME_SITE_VALUES.find((value) => value.toLowerCase() === String(result.sameSite).toLowerCase());
+			if (sameSite) result.sameSite = sameSite;
+			else {
+				console.warn(`[ngx-cookie-service] Cookie ${name}: ignoring invalid sameSite value "${String(result.sameSite)}".`);
+				delete result.sameSite;
+			}
+		}
+		return result;
+	}
+	static hasUnsafeCharacter(value) {
+		return [...value].some((character) => {
+			const code = character.charCodeAt(0);
+			return character === ";" || code < 32 || code === 127;
+		});
+	}
+	static toDeleteOptions(pathOrOptions, domain, secure, sameSite) {
+		if (typeof pathOrOptions === "object" && pathOrOptions !== null) return { ...pathOrOptions };
+		return {
+			path: pathOrOptions,
+			domain,
+			secure,
+			sameSite
+		};
+	}
+	static {
+		this.ɵfac = i0.ɵɵngDeclareFactory({
+			minVersion: "12.0.0",
+			version: "22.2.2",
+			ngImport: i0,
+			type: CookieService,
+			deps: [],
+			target: i0.ɵɵFactoryTarget.Injectable
+		});
+	}
+	static {
+		this.ɵprov = i0.ɵɵngDeclareInjectable({
+			minVersion: "12.0.0",
+			version: "22.2.2",
+			ngImport: i0,
+			type: CookieService,
+			providedIn: "root"
+		});
+	}
+};
+i0.ɵɵngDeclareClassMetadata({
+	minVersion: "12.0.0",
+	version: "22.2.2",
+	ngImport: i0,
+	type: CookieService,
+	decorators: [{
+		type: Injectable,
+		args: [{ providedIn: "root" }]
+	}],
+	ctorParameters: () => []
+});
+export { COOKIE_ENCODING, COOKIE_OPTIONS, CookieService, provideCookieEncoding, provideCookieOptions };
 
-export { CookieService };
-//# sourceMappingURL=ngx-cookie-service.mjs.map
+//# sourceMappingURL=ngx-cookie-service.mjs.map

package/fesm2022/ngx-cookie-service.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"ngx-cookie-service.mjs","sources":["../../../projects/ngx-cookie-service/src/lib/cookie.service.ts","../../../projects/ngx-cookie-service/src/public-api.ts","../../../projects/ngx-cookie-service/src/ngx-cookie-service.ts"],"sourcesContent":["import { isPlatformBrowser } from '@angular/common';\nimport { DOCUMENT, inject, Injectable, PLATFORM_ID } from '@angular/core';\n\nexport type SameSite = 'Lax' | 'None' | 'Strict';\n\nexport interface CookieOptions {\n  expires?: number | Date;\n  path?: string;\n  domain?: string;\n  secure?: boolean;\n  sameSite?: SameSite;\n  partitioned?: boolean;\n}\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class CookieService {\n  private readonly documentIsAccessible: boolean;\n  private readonly document = inject<Document>(DOCUMENT);\n  private readonly platformId = inject<object>(PLATFORM_ID);\n\n  constructor() {\n    this.documentIsAccessible = isPlatformBrowser(this.platformId);\n  }\n\n  /**\n   * Get cookie Regular Expression\n   *\n   * @param name Cookie name\n   * @returns property RegExp\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  private static getCookieRegExp(name: string): RegExp {\n    const escapedName: string = name.replace(/([[\\]{}()|=;+?,.*^$\\\\])/gi, '\\\\$1');\n\n    return new RegExp('(?:^' + escapedName + '|;\\\\s*' + escapedName + ')=(.*?)(?:;|$)');\n  }\n\n  /**\n   * Gets the decoded version of an encoded component of a Uniform Resource Identifier (URI).\n   *\n   * @param encodedURIComponent A value representing an encoded URI component.\n   *\n   * @returns The decoded version of an encoded component of a Uniform Resource Identifier (URI).\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  private static safeDecodeURIComponent(encodedURIComponent: string): string {\n    try {\n      return decodeURIComponent(encodedURIComponent);\n    } catch {\n      // probably it is not uri encoded. return as is\n      return encodedURIComponent;\n    }\n  }\n\n  /**\n   * Return `true` if {@link Document} is accessible, otherwise return `false`\n   *\n   * @param name Cookie name\n   * @returns boolean - whether cookie with specified name exists\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  check(name: string): boolean {\n    if (!this.documentIsAccessible) {\n      return false;\n    }\n    name = encodeURIComponent(name);\n    const regExp = CookieService.getCookieRegExp(name);\n    return regExp.test(this.document.cookie);\n  }\n\n  /**\n   * Get cookies by name\n   *\n   * @param name Cookie name\n   * @returns property value\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  get(name: string): string {\n    if (this.check(name)) {\n      name = encodeURIComponent(name);\n      const regExp: RegExp = CookieService.getCookieRegExp(name);\n      const result = regExp.exec(this.document.cookie);\n      return result?.[1] ? CookieService.safeDecodeURIComponent(result[1]) : '';\n    } else {\n      return '';\n    }\n  }\n\n  /**\n   * Get all cookies in JSON format\n   *\n   * @returns all the cookies in json\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  getAll(): Record<string, string> {\n    if (!this.documentIsAccessible) {\n      return {};\n    }\n\n    const cookies: Record<string, string> = {};\n    const document: Document = this.document;\n\n    if (document.cookie && document.cookie !== '') {\n      document.cookie.split(';').forEach((currentCookie: string) => {\n        const [cookieName, cookieValue] = currentCookie.split('=');\n        cookies[CookieService.safeDecodeURIComponent(cookieName.replace(/^ /, ''))] = CookieService.safeDecodeURIComponent(cookieValue);\n      });\n    }\n\n    return cookies;\n  }\n\n  /**\n   * Set cookie based on provided information\n   *\n   * @param name     Cookie name\n   * @param value    Cookie value\n   * @param expires  Number of days until the cookies expires or an actual `Date`\n   * @param path     Cookie path\n   * @param domain   Cookie domain\n   * @param secure   Secure flag\n   * @param partitioned Partitioned flag\n   * @param sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  set(\n    name: string,\n    value: string,\n    expires?: CookieOptions['expires'],\n    path?: CookieOptions['path'],\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite,\n    partitioned?: CookieOptions['partitioned']\n  ): void;\n\n  /**\n   * Set cookie based on provided information\n   *\n   * Cookie's parameters:\n   * <pre>\n   * expires  Number of days until the cookies expires or an actual `Date`\n   * path     Cookie path\n   * domain   Cookie domain\n   * secure flag\n   * sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`\n   * </pre>\n   *\n   * @param name     Cookie name\n   * @param value    Cookie value\n   * @param options  Body with cookie's params\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  set(name: string, value: string, options?: CookieOptions): void;\n\n  set(\n    name: string,\n    value: string,\n    expiresOrOptions?: CookieOptions['expires'] | CookieOptions,\n    path?: CookieOptions['path'],\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite,\n    partitioned?: CookieOptions['partitioned']\n  ): void {\n    if (!this.documentIsAccessible) {\n      return;\n    }\n\n    if (typeof expiresOrOptions === 'number' || expiresOrOptions instanceof Date || path || domain || secure || sameSite) {\n      const optionsBody = {\n        expires: expiresOrOptions as CookieOptions['expires'],\n        path,\n        domain,\n        secure,\n        sameSite: sameSite || 'Lax',\n        partitioned,\n      };\n\n      this.set(name, value, optionsBody);\n      return;\n    }\n\n    let cookieString: string = encodeURIComponent(name) + '=' + encodeURIComponent(value) + ';';\n\n    const options = expiresOrOptions ? expiresOrOptions : {};\n\n    if (options.expires) {\n      if (typeof options.expires === 'number') {\n        const dateExpires: Date = new Date(new Date().getTime() + options.expires * 1000 * 60 * 60 * 24);\n\n        cookieString += 'Expires=' + dateExpires.toUTCString() + ';';\n      } else {\n        cookieString += 'Expires=' + options.expires.toUTCString() + ';';\n      }\n    }\n\n    if (options.path) {\n      cookieString += 'Path=' + options.path + ';';\n    }\n\n    if (options.domain) {\n      cookieString += 'Domain=' + options.domain + ';';\n    }\n\n    if (options.secure === false && options.sameSite === 'None') {\n      options.secure = true;\n      console.warn(\n        `[ngx-cookie-service] Cookie ${name} was forced with secure flag because sameSite=None.` +\n          `More details : https://github.com/stevermeister/ngx-cookie-service/issues/86#issuecomment-597720130`\n      );\n    }\n    if (options.secure) {\n      cookieString += 'Secure;';\n    }\n\n    if (!options.sameSite) {\n      options.sameSite = 'Lax';\n    }\n\n    cookieString += 'SameSite=' + options.sameSite + ';';\n\n    if (options.partitioned) {\n      cookieString += 'Partitioned;';\n    }\n\n    this.document.cookie = cookieString;\n  }\n\n  /**\n   * Delete cookie by name at given path and domain. If not path is not specified, cookie at '/' path will be deleted.\n   *\n   * @param name   Cookie name\n   * @param path   Cookie path\n   * @param domain Cookie domain\n   * @param secure Cookie secure flag\n   * @param sameSite Cookie sameSite flag - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  delete(name: string, path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite: SameSite = 'Lax'): void {\n    if (!this.documentIsAccessible) {\n      return;\n    }\n    const expiresDate = new Date('Thu, 01 Jan 1970 00:00:01 GMT');\n    this.set(name, '', { expires: expiresDate, path, domain, secure, sameSite });\n  }\n\n  /**\n   * Delete all cookies at given path and domain. If not path is not specified, all cookies at '/' path will be deleted.\n   *\n   * @param path   Cookie path\n   * @param domain Cookie domain\n   * @param secure Is the Cookie secure\n   * @param sameSite Is the cookie same site\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  deleteAll(path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite: SameSite = 'Lax'): void {\n    if (!this.documentIsAccessible) {\n      return;\n    }\n\n    const cookies: any = this.getAll();\n\n    for (const cookieName in cookies) {\n      if (cookies.hasOwnProperty(cookieName)) {\n        this.delete(cookieName, path, domain, secure, sameSite);\n      }\n    }\n  }\n}\n","/*\n * Public API Surface of ngx-cookie-service\n */\n\nexport * from './lib/cookie.service';\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;MAiBa,aAAa,CAAA;AAKxB,IAAA,WAAA,GAAA;AAHiB,QAAA,IAAA,CAAA,QAAQ,GAAG,MAAM,CAAW,QAAQ,CAAC;AACrC,QAAA,IAAA,CAAA,UAAU,GAAG,MAAM,CAAS,WAAW,CAAC;QAGvD,IAAI,CAAC,oBAAoB,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC;IAChE;AAEA;;;;;;;;AAQG;IACK,OAAO,eAAe,CAAC,IAAY,EAAA;QACzC,MAAM,WAAW,GAAW,IAAI,CAAC,OAAO,CAAC,2BAA2B,EAAE,MAAM,CAAC;AAE7E,QAAA,OAAO,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,gBAAgB,CAAC;IACrF;AAEA;;;;;;;;;AASG;IACK,OAAO,sBAAsB,CAAC,mBAA2B,EAAA;AAC/D,QAAA,IAAI;AACF,YAAA,OAAO,kBAAkB,CAAC,mBAAmB,CAAC;QAChD;AAAE,QAAA,MAAM;;AAEN,YAAA,OAAO,mBAAmB;QAC5B;IACF;AAEA;;;;;;;;AAQG;AACH,IAAA,KAAK,CAAC,IAAY,EAAA;AAChB,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;AAC9B,YAAA,OAAO,KAAK;QACd;AACA,QAAA,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC;QAC/B,MAAM,MAAM,GAAG,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC;QAClD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;IAC1C;AAEA;;;;;;;;AAQG;AACH,IAAA,GAAG,CAAC,IAAY,EAAA;AACd,QAAA,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE;AACpB,YAAA,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC;YAC/B,MAAM,MAAM,GAAW,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC;AAC1D,YAAA,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,OAAO,MAAM,GAAG,CAAC,CAAC,GAAG,aAAa,CAAC,sBAAsB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;QAC3E;aAAO;AACL,YAAA,OAAO,EAAE;QACX;IACF;AAEA;;;;;;;AAOG;IACH,MAAM,GAAA;AACJ,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;AAC9B,YAAA,OAAO,EAAE;QACX;QAEA,MAAM,OAAO,GAA2B,EAAE;AAC1C,QAAA,MAAM,QAAQ,GAAa,IAAI,CAAC,QAAQ;QAExC,IAAI,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,EAAE,EAAE;AAC7C,YAAA,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,aAAqB,KAAI;AAC3D,gBAAA,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC;gBAC1D,OAAO,CAAC,aAAa,CAAC,sBAAsB,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,sBAAsB,CAAC,WAAW,CAAC;AACjI,YAAA,CAAC,CAAC;QACJ;AAEA,QAAA,OAAO,OAAO;IAChB;AAiDA,IAAA,GAAG,CACD,IAAY,EACZ,KAAa,EACb,gBAA2D,EAC3D,IAA4B,EAC5B,MAAgC,EAChC,MAAgC,EAChC,QAAmB,EACnB,WAA0C,EAAA;AAE1C,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B;QACF;AAEA,QAAA,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,YAAY,IAAI,IAAI,IAAI,IAAI,MAAM,IAAI,MAAM,IAAI,QAAQ,EAAE;AACpH,YAAA,MAAM,WAAW,GAAG;AAClB,gBAAA,OAAO,EAAE,gBAA4C;gBACrD,IAAI;gBACJ,MAAM;gBACN,MAAM;gBACN,QAAQ,EAAE,QAAQ,IAAI,KAAK;gBAC3B,WAAW;aACZ;YAED,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,CAAC;YAClC;QACF;AAEA,QAAA,IAAI,YAAY,GAAW,kBAAkB,CAAC,IAAI,CAAC,GAAG,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,GAAG,GAAG;QAE3F,MAAM,OAAO,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,EAAE;AAExD,QAAA,IAAI,OAAO,CAAC,OAAO,EAAE;AACnB,YAAA,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,EAAE;gBACvC,MAAM,WAAW,GAAS,IAAI,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;gBAEhG,YAAY,IAAI,UAAU,GAAG,WAAW,CAAC,WAAW,EAAE,GAAG,GAAG;YAC9D;iBAAO;gBACL,YAAY,IAAI,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,GAAG;YAClE;QACF;AAEA,QAAA,IAAI,OAAO,CAAC,IAAI,EAAE;YAChB,YAAY,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,GAAG,GAAG;QAC9C;AAEA,QAAA,IAAI,OAAO,CAAC,MAAM,EAAE;YAClB,YAAY,IAAI,SAAS,GAAG,OAAO,CAAC,MAAM,GAAG,GAAG;QAClD;AAEA,QAAA,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE;AAC3D,YAAA,OAAO,CAAC,MAAM,GAAG,IAAI;AACrB,YAAA,OAAO,CAAC,IAAI,CACV,CAAA,4BAAA,EAA+B,IAAI,CAAA,mDAAA,CAAqD;AACtF,gBAAA,CAAA,mGAAA,CAAqG,CACxG;QACH;AACA,QAAA,IAAI,OAAO,CAAC,MAAM,EAAE;YAClB,YAAY,IAAI,SAAS;QAC3B;AAEA,QAAA,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;AACrB,YAAA,OAAO,CAAC,QAAQ,GAAG,KAAK;QAC1B;QAEA,YAAY,IAAI,WAAW,GAAG,OAAO,CAAC,QAAQ,GAAG,GAAG;AAEpD,QAAA,IAAI,OAAO,CAAC,WAAW,EAAE;YACvB,YAAY,IAAI,cAAc;QAChC;AAEA,QAAA,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,YAAY;IACrC;AAEA;;;;;;;;;;;AAWG;IACH,MAAM,CAAC,IAAY,EAAE,IAA4B,EAAE,MAAgC,EAAE,MAAgC,EAAE,QAAA,GAAqB,KAAK,EAAA;AAC/I,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B;QACF;AACA,QAAA,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,+BAA+B,CAAC;QAC7D,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC9E;AAEA;;;;;;;;;;AAUG;IACH,SAAS,CAAC,IAA4B,EAAE,MAAgC,EAAE,MAAgC,EAAE,WAAqB,KAAK,EAAA;AACpI,QAAA,IAAI,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAC9B;QACF;AAEA,QAAA,MAAM,OAAO,GAAQ,IAAI,CAAC,MAAM,EAAE;AAElC,QAAA,KAAK,MAAM,UAAU,IAAI,OAAO,EAAE;AAChC,YAAA,IAAI,OAAO,CAAC,cAAc,CAAC,UAAU,CAAC,EAAE;AACtC,gBAAA,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC;YACzD;QACF;IACF;8GA/QW,aAAa,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA,CAAA;AAAb,IAAA,SAAA,IAAA,CAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,QAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,aAAa,cAFZ,MAAM,EAAA,CAAA,CAAA;;2FAEP,aAAa,EAAA,UAAA,EAAA,CAAA;kBAHzB,UAAU;AAAC,YAAA,IAAA,EAAA,CAAA;AACV,oBAAA,UAAU,EAAE,MAAM;AACnB,iBAAA;;;AChBD;;AAEG;;ACFH;;AAEG;;;;"}
+{"version":3,"file":"ngx-cookie-service.mjs","names":[],"sources":["../../../projects/ngx-cookie-service/src/lib/cookie.config.ts","../../../projects/ngx-cookie-service/src/lib/cookie.service.ts"],"sourcesContent":["import { EnvironmentProviders, InjectionToken, makeEnvironmentProviders } from '@angular/core';\nimport type { CookieOptions } from './cookie.service';\n\n/**\n * App-wide default options for {@link CookieService}. Provide them with {@link provideCookieOptions}.\n *\n * @author: Pavankumar Jadda\n * @since: 22.2.0\n */\nexport const COOKIE_OPTIONS = new InjectionToken<CookieOptions>('ngx-cookie-service default cookie options');\n\n/**\n * Sets default options for every `set()`, `delete()` and `deleteAll()` call of {@link CookieService}.\n *\n * Options passed to a call win over these defaults, and `undefined` values don't override them. A call that passes its own\n * `expires` replaces the default one, so `delete()` always expires the cookie.\n *\n * ```ts\n * export const appConfig: ApplicationConfig = {\n *   providers: [provideCookieOptions({ path: '/', secure: true, sameSite: 'Strict' })],\n * };\n * ```\n *\n * @param options Default cookie options\n * @returns Providers to add to the application config\n *\n * @author: Pavankumar Jadda\n * @since: 22.2.0\n */\nexport function provideCookieOptions(options: CookieOptions): EnvironmentProviders {\n  return makeEnvironmentProviders([{ provide: COOKIE_OPTIONS, useValue: { ...options } }]);\n}\n\n/**\n * A custom encoding for cookie values, used with {@link provideCookieEncoding}.\n *\n * `encode` runs on every value written by `set()`, and `decode` on every value read by `get()` and `getAll()`. Cookie names\n * keep the default encoding. If `decode` throws, the raw value is returned instead.\n *\n * @author: Pavankumar Jadda\n * @since: 22.2.0\n */\nexport interface CookieCodec {\n  encode(value: string, name: string): string;\n  decode(value: string, name: string): string;\n}\n\n/**\n * How {@link CookieService} encodes cookie values:\n *\n * - `'uri'` (default): `encodeURIComponent` and `decodeURIComponent`.\n * - `'minimal'`: values made only of characters allowed in a cookie value (RFC 6265 cookie-octets, except `%`) are written\n *   as-is, and other values are encoded with `encodeURIComponent`. This is the default of the jshttp `cookie` package used\n *   by Express, and keeps values such as JWTs and base64 readable by servers that don't URL-decode cookies.\n * - A {@link CookieCodec} for a custom scheme.\n *\n * @author: Pavankumar Jadda\n * @since: 22.2.0\n */\nexport type CookieEncoding = 'uri' | 'minimal' | CookieCodec;\n\n/**\n * The cookie value encoding for {@link CookieService}. Provide it with {@link provideCookieEncoding}.\n *\n * @author: Pavankumar Jadda\n * @since: 22.2.0\n */\nexport const COOKIE_ENCODING = new InjectionToken<CookieEncoding>('ngx-cookie-service cookie value encoding');\n\n/**\n * Sets how {@link CookieService} encodes cookie values when writing them and decodes them when reading.\n *\n * ```ts\n * export const appConfig: ApplicationConfig = {\n *   providers: [provideCookieEncoding('minimal')],\n * };\n * ```\n *\n * @param encoding `'uri'` (default), `'minimal'`, or a custom {@link CookieCodec}\n * @returns Providers to add to the application config\n *\n * @author: Pavankumar Jadda\n * @since: 22.2.0\n */\nexport function provideCookieEncoding(encoding: CookieEncoding): EnvironmentProviders {\n  return makeEnvironmentProviders([{ provide: COOKIE_ENCODING, useValue: encoding }]);\n}\n","import { isPlatformBrowser } from '@angular/common';\nimport { DOCUMENT, inject, Injectable, PLATFORM_ID } from '@angular/core';\nimport { COOKIE_ENCODING, COOKIE_OPTIONS, CookieCodec, CookieEncoding } from './cookie.config';\n\nexport type SameSite = 'Lax' | 'None' | 'Strict';\n\nexport interface CookieOptions {\n  expires?: number | Date;\n  path?: string;\n  domain?: string;\n  secure?: boolean;\n  sameSite?: SameSite;\n  partitioned?: boolean;\n}\n\n/**\n * Attributes that identify the cookie to delete. They must match the attributes the cookie was set with.\n */\nexport type DeleteCookieOptions = Omit<CookieOptions, 'expires'>;\n\n/**\n * Cookie options after validation: invalid values are removed and `expires` is always a `Date`.\n */\ntype ValidCookieOptions = Omit<CookieOptions, 'expires'> & { expires?: Date };\n\n/**\n * The `SameSite` values browsers accept, in their canonical spelling.\n */\nconst SAME_SITE_VALUES: readonly SameSite[] = ['Lax', 'Strict', 'None'];\n\n/**\n * RFC 6265 cookie-octets except `%`: values made only of these are written as-is by the `'minimal'` encoding and still\n * decode to themselves. Same pattern as the jshttp `cookie` package (2.x) used by Express.\n */\nconst COOKIE_OCTET_REGEXP = /^[!#$&'()*+\\-./0-9:<=>?@A-Z[\\]^_`a-z{|}~]*$/;\n\n@Injectable({\n  providedIn: 'root',\n})\nexport class CookieService {\n  private readonly documentIsAccessible: boolean;\n  private readonly document = inject<Document>(DOCUMENT);\n  private readonly platformId = inject<object>(PLATFORM_ID);\n  private readonly defaultOptions: CookieOptions = inject(COOKIE_OPTIONS, { optional: true }) ?? {};\n  private readonly codec: CookieCodec = CookieService.toCodec(inject(COOKIE_ENCODING, { optional: true }));\n\n  constructor() {\n    this.documentIsAccessible = isPlatformBrowser(this.platformId);\n  }\n\n  /**\n   * Get cookie Regular Expression\n   *\n   * @param name Cookie name\n   * @returns property RegExp\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  private static getCookieRegExp(name: string): RegExp {\n    const escapedName: string = name.replace(/([[\\]{}()|=;+?,.*^$\\\\])/gi, '\\\\$1');\n\n    return new RegExp('(?:^' + escapedName + '|;\\\\s*' + escapedName + ')=(.*?)(?:;|$)');\n  }\n\n  /**\n   * Gets the decoded version of an encoded component of a Uniform Resource Identifier (URI).\n   *\n   * @param encodedURIComponent A value representing an encoded URI component.\n   *\n   * @returns The decoded version of an encoded component of a Uniform Resource Identifier (URI).\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  private static safeDecodeURIComponent(encodedURIComponent: string): string {\n    try {\n      return decodeURIComponent(encodedURIComponent);\n    } catch {\n      // probably it is not uri encoded. return as is\n      return encodedURIComponent;\n    }\n  }\n\n  /**\n   * Return `true` if {@link Document} is accessible, otherwise return `false`\n   *\n   * @param name Cookie name\n   * @returns boolean - whether cookie with specified name exists\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  check(name: string): boolean {\n    if (!this.documentIsAccessible) {\n      return false;\n    }\n    name = encodeURIComponent(name);\n    const regExp = CookieService.getCookieRegExp(name);\n    return regExp.test(this.document.cookie);\n  }\n\n  /**\n   * Get cookies by name\n   *\n   * @param name Cookie name\n   * @returns property value\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  get(name: string): string {\n    if (this.check(name)) {\n      const regExp: RegExp = CookieService.getCookieRegExp(encodeURIComponent(name));\n      const result = regExp.exec(this.document.cookie);\n      return result?.[1] ? this.decodeValue(result[1], name) : '';\n    } else {\n      return '';\n    }\n  }\n\n  /**\n   * Get all cookies in JSON format\n   *\n   * @returns all the cookies in json\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  getAll(): Record<string, string> {\n    if (!this.documentIsAccessible) {\n      return {};\n    }\n\n    const cookies: Record<string, string> = {};\n    const document: Document = this.document;\n\n    if (document.cookie && document.cookie !== '') {\n      document.cookie.split(';').forEach((currentCookie: string) => {\n        const trimmedCookie = currentCookie.trim();\n        if (!trimmedCookie) {\n          return;\n        }\n        // Split on the first '=' only, so values containing '=' (e.g. base64 padding) are preserved\n        const equalIndex = trimmedCookie.indexOf('=');\n        if (equalIndex === -1) {\n          // Cookie without value (invalid, but handle gracefully)\n          return;\n        }\n        const cookieName = CookieService.safeDecodeURIComponent(trimmedCookie.substring(0, equalIndex));\n        // Browsers list the most specific cookie first when several share a name. Keep that one, as get() does.\n        if (Object.hasOwn(cookies, cookieName)) {\n          return;\n        }\n        // defineProperty stores names such as \"__proto__\" as normal entries instead of touching the object's prototype\n        Object.defineProperty(cookies, cookieName, {\n          value: this.decodeValue(trimmedCookie.substring(equalIndex + 1), cookieName),\n          enumerable: true,\n          writable: true,\n          configurable: true,\n        });\n      });\n    }\n\n    return cookies;\n  }\n\n  /**\n   * Set cookie based on provided information\n   *\n   * @param name     Cookie name\n   * @param value    Cookie value\n   * @param expires  Number of days until the cookies expires or an actual `Date`\n   * @param path     Cookie path\n   * @param domain   Cookie domain\n   * @param secure   Secure flag\n   * @param partitioned Partitioned flag\n   * @param sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  set(\n    name: string,\n    value: string,\n    expires?: CookieOptions['expires'],\n    path?: CookieOptions['path'],\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite,\n    partitioned?: CookieOptions['partitioned']\n  ): void;\n\n  /**\n   * Set cookie based on provided information\n   *\n   * Cookie's parameters:\n   * <pre>\n   * expires  Number of days until the cookies expires or an actual `Date`\n   * path     Cookie path\n   * domain   Cookie domain\n   * secure flag\n   * sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`\n   * </pre>\n   *\n   * @param name     Cookie name\n   * @param value    Cookie value\n   * @param options  Body with cookie's params\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  set(name: string, value: string, options?: CookieOptions): void;\n\n  set(\n    name: string,\n    value: string,\n    expiresOrOptions?: CookieOptions['expires'] | CookieOptions,\n    path?: CookieOptions['path'],\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite,\n    partitioned?: CookieOptions['partitioned']\n  ): void {\n    if (!this.documentIsAccessible) {\n      return;\n    }\n\n    // Anything but an options object means the positional form, so no positional argument (e.g. a lone `partitioned`) is dropped\n    if (typeof expiresOrOptions !== 'object' || expiresOrOptions === null || expiresOrOptions instanceof Date) {\n      const optionsBody = {\n        expires: expiresOrOptions as CookieOptions['expires'],\n        path,\n        domain,\n        secure,\n        sameSite,\n        partitioned,\n      };\n\n      this.set(name, value, optionsBody);\n      return;\n    }\n\n    // validateOptions() returns a copy, so the defaults applied below don't leak back into the caller's object\n    const options = CookieService.validateOptions(name, CookieService.withDefaults(this.defaultOptions, expiresOrOptions));\n    if (!options) {\n      return;\n    }\n\n    const encodedValue = this.encodeValue(name, value);\n    if (encodedValue === undefined) {\n      return;\n    }\n\n    let cookieString: string = encodeURIComponent(name) + '=' + encodedValue + ';';\n\n    if (options.expires) {\n      cookieString += 'Expires=' + options.expires.toUTCString() + ';';\n    }\n\n    if (options.path) {\n      cookieString += 'Path=' + options.path + ';';\n    }\n\n    if (options.domain) {\n      cookieString += 'Domain=' + options.domain + ';';\n    }\n\n    if (options.sameSite === 'None' && !options.secure) {\n      options.secure = true;\n      console.warn(\n        `[ngx-cookie-service] Cookie ${name} was forced with secure flag because sameSite=None.` +\n          `More details : https://github.com/stevermeister/ngx-cookie-service/issues/86#issuecomment-597720130`\n      );\n    }\n    if (options.partitioned && !options.secure) {\n      options.secure = true;\n      console.warn(`[ngx-cookie-service] Cookie ${name} was forced with secure flag because Partitioned cookies must be Secure.`);\n    }\n    if (options.secure) {\n      cookieString += 'Secure;';\n    }\n\n    if (!options.sameSite) {\n      options.sameSite = 'Lax';\n    }\n\n    cookieString += 'SameSite=' + options.sameSite + ';';\n\n    if (options.partitioned) {\n      cookieString += 'Partitioned;';\n    }\n\n    this.document.cookie = cookieString;\n  }\n\n  /**\n   * Delete cookie by name at given path and domain.\n   *\n   * If `path` is not specified, no `Path` attribute is written and the browser uses its default path: the directory of the URL\n   * the page was loaded at (not the current router URL). To delete a cookie that was set with `path: '/'`, pass `'/'` here too.\n   *\n   * @param name   Cookie name\n   * @param path   Cookie path\n   * @param domain Cookie domain\n   * @param secure Cookie secure flag\n   * @param sameSite Cookie sameSite flag - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  delete(name: string, path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite): void;\n\n  /**\n   * Delete cookie by name. The options must match the attributes the cookie was set with: `path` and `domain` select the\n   * cookie, and `partitioned: true` is required to delete a Partitioned cookie.\n   *\n   * If `path` is not specified, no `Path` attribute is written and the browser uses its default path: the directory of the URL\n   * the page was loaded at (not the current router URL). To delete a cookie that was set with `path: '/'`, pass `'/'` here too.\n   *\n   * @param name    Cookie name\n   * @param options Cookie attributes: `path`, `domain`, `secure`, `sameSite` and `partitioned`\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.1.0\n   */\n  delete(name: string, options?: DeleteCookieOptions): void;\n\n  delete(\n    name: string,\n    pathOrOptions?: CookieOptions['path'] | DeleteCookieOptions,\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite\n  ): void {\n    if (!this.documentIsAccessible) {\n      return;\n    }\n    const options = CookieService.toDeleteOptions(pathOrOptions, domain, secure, sameSite);\n    this.set(name, '', { ...options, expires: new Date('Thu, 01 Jan 1970 00:00:01 GMT') });\n  }\n\n  /**\n   * Delete all cookies at given path and domain.\n   *\n   * If `path` is not specified, the browser's default path is used for each cookie, as described for {@link delete}.\n   *\n   * @param path   Cookie path\n   * @param domain Cookie domain\n   * @param secure Is the Cookie secure\n   * @param sameSite Is the cookie same site\n   *\n   * @author: Stepan Suvorov\n   * @since: 1.0.0\n   */\n  deleteAll(path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite): void;\n\n  /**\n   * Delete all cookies that can currently be accessed, using the same attributes for each one.\n   *\n   * If `path` is not specified, the browser's default path is used for each cookie, as described for {@link delete}.\n   *\n   * @param options Cookie attributes: `path`, `domain`, `secure`, `sameSite` and `partitioned`\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.1.0\n   */\n  deleteAll(options?: DeleteCookieOptions): void;\n\n  deleteAll(\n    pathOrOptions?: CookieOptions['path'] | DeleteCookieOptions,\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite\n  ): void {\n    if (!this.documentIsAccessible) {\n      return;\n    }\n\n    // Object.keys() rather than for...in with cookies.hasOwnProperty(): a cookie named \"hasOwnProperty\" would shadow that method\n    for (const cookieName of Object.keys(this.getAll())) {\n      // Call delete() the same way deleteAll() was called, so overrides and spies of the positional form keep working\n      if (typeof pathOrOptions === 'object' && pathOrOptions !== null) {\n        this.delete(cookieName, pathOrOptions);\n      } else {\n        this.delete(cookieName, pathOrOptions, domain, secure, sameSite);\n      }\n    }\n  }\n\n  /**\n   * Built-in `'uri'` encoding: `encodeURIComponent`, decoded with {@link CookieService.safeDecodeURIComponent}.\n   */\n  private static readonly uriCodec: CookieCodec = {\n    encode: (value) => encodeURIComponent(value),\n    decode: (value) => CookieService.safeDecodeURIComponent(value),\n  };\n\n  /**\n   * Built-in `'minimal'` encoding: values made only of cookie-octets are written as-is, others use `encodeURIComponent`.\n   */\n  private static readonly minimalCodec: CookieCodec = {\n    encode: (value) => (COOKIE_OCTET_REGEXP.test(value) ? value : encodeURIComponent(value)),\n    decode: (value) => CookieService.safeDecodeURIComponent(value),\n  };\n\n  /**\n   * Resolves the encoding provided with {@link provideCookieEncoding} to a codec, defaulting to `'uri'`.\n   *\n   * @param encoding Provided encoding, or `null` when none was provided\n   * @returns The codec to use\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.2.0\n   */\n  private static toCodec(encoding: CookieEncoding | null): CookieCodec {\n    if (encoding === 'minimal') {\n      return CookieService.minimalCodec;\n    }\n    if (typeof encoding === 'object' && encoding !== null) {\n      return encoding;\n    }\n    return CookieService.uriCodec;\n  }\n\n  /**\n   * Encodes a cookie value with the configured encoding. Returns `undefined`, with a warning, when the result can't be\n   * written safely because it isn't a string or contains `;` or a control character.\n   *\n   * @param name  Cookie name\n   * @param value Cookie value\n   * @returns The encoded value, or `undefined` to skip the write\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.2.0\n   */\n  private encodeValue(name: string, value: string): string | undefined {\n    const encodedValue = this.codec.encode(value, name);\n    if (typeof encodedValue !== 'string' || CookieService.hasUnsafeCharacter(encodedValue)) {\n      console.warn(`[ngx-cookie-service] Cookie ${name} was skipped because its encoded value isn't a string without \";\" or control characters.`);\n      return undefined;\n    }\n    return encodedValue;\n  }\n\n  /**\n   * Decodes a cookie value with the configured encoding. If a custom `decode` throws, the raw value is returned.\n   *\n   * @param value Raw cookie value\n   * @param name  Decoded cookie name\n   * @returns The decoded value\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.2.0\n   */\n  private decodeValue(value: string, name: string): string {\n    try {\n      return this.codec.decode(value, name);\n    } catch {\n      return value;\n    }\n  }\n\n  /**\n   * Merges the app-wide defaults from {@link provideCookieOptions} under the options of one call.\n   *\n   * Values passed to the call win, and `undefined` or `null` values don't override a default.\n   *\n   * @param defaults Default cookie options\n   * @param options  Options passed to the call\n   * @returns A new, merged CookieOptions object\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.2.0\n   */\n  private static withDefaults(defaults: CookieOptions, options: CookieOptions = {}): CookieOptions {\n    const merged: Record<string, unknown> = { ...defaults };\n    for (const [key, value] of Object.entries(options)) {\n      if (value !== undefined && value !== null) {\n        merged[key] = value;\n      }\n    }\n    return merged as CookieOptions;\n  }\n\n  /**\n   * Returns a validated copy of the options, or `undefined` if the cookie must not be written.\n   *\n   * A `path` or `domain` containing `;` or a control character could inject attributes or change the cookie's scope, so the\n   * whole write is skipped. An invalid `expires` is dropped, which makes a session cookie as browsers already did, and an\n   * unknown `sameSite` falls back to the `Lax` default. Each case logs a warning. A numeric `expires` (days\n   * from now) is converted to a `Date`, and `sameSite` is matched case-insensitively.\n   *\n   * @param name    Cookie name, used in warnings\n   * @param options Cookie options\n   * @returns A validated copy of the options, or `undefined` to skip the write\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.1.0\n   */\n  private static validateOptions(name: string, options: CookieOptions = {}): ValidCookieOptions | undefined {\n    const { expires, ...valid }: CookieOptions = options;\n    const result: ValidCookieOptions = valid;\n\n    for (const attribute of ['path', 'domain'] as const) {\n      const attributeValue = result[attribute];\n      if (typeof attributeValue === 'string' && CookieService.hasUnsafeCharacter(attributeValue)) {\n        console.warn(`[ngx-cookie-service] Cookie ${name} was skipped because its ${attribute} contains \";\" or a control character.`);\n        return undefined;\n      }\n    }\n    if (expires) {\n      const date = typeof expires === 'number' ? new Date(Date.now() + expires * 1000 * 60 * 60 * 24) : expires;\n      if (date instanceof Date && Number.isFinite(date.getTime())) {\n        result.expires = date;\n      } else {\n        console.warn(`[ngx-cookie-service] Cookie ${name}: ignoring invalid expires value \"${String(expires)}\".`);\n      }\n    }\n    if (result.sameSite !== undefined && result.sameSite !== null) {\n      const sameSite = SAME_SITE_VALUES.find((value) => value.toLowerCase() === String(result.sameSite).toLowerCase());\n      if (sameSite) {\n        result.sameSite = sameSite;\n      } else {\n        console.warn(`[ngx-cookie-service] Cookie ${name}: ignoring invalid sameSite value \"${String(result.sameSite)}\".`);\n        delete result.sameSite;\n      }\n    }\n    return result;\n  }\n\n  /**\n   * Whether a cookie attribute value contains `;` or an ASCII control character, which would end the attribute early or\n   * corrupt the header.\n   *\n   * @param value Attribute value\n   * @returns `true` if the value is unsafe to write\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.1.0\n   */\n  private static hasUnsafeCharacter(value: string): boolean {\n    return [...value].some((character) => {\n      const code = character.charCodeAt(0);\n      return character === ';' || code < 0x20 || code === 0x7f;\n    });\n  }\n\n  /**\n   * Builds delete options from either an options object or the positional `path`, `domain`, `secure` and `sameSite` arguments.\n   *\n   * @param pathOrOptions Either a DeleteCookieOptions object or the cookie path\n   * @param domain   Cookie domain\n   * @param secure   Cookie secure flag\n   * @param sameSite Cookie sameSite flag\n   * @returns A new DeleteCookieOptions object\n   *\n   * @author: Pavankumar Jadda\n   * @since: 22.1.0\n   */\n  private static toDeleteOptions(\n    pathOrOptions?: CookieOptions['path'] | DeleteCookieOptions,\n    domain?: CookieOptions['domain'],\n    secure?: CookieOptions['secure'],\n    sameSite?: SameSite\n  ): DeleteCookieOptions {\n    if (typeof pathOrOptions === 'object' && pathOrOptions !== null) {\n      return { ...pathOrOptions };\n    }\n    return { path: pathOrOptions, domain, secure, sameSite };\n  }\n}\n"],"mappings":";;;AASA,MAAa,iBAAiB,IAAI,eAA8B,2CAA2C;AAoB3G,SAAgB,qBAAqB,SAAsB;CACzD,OAAO,yBAAyB,CAAC;EAAE,SAAS;EAAgB,UAAU,EAAE,GAAG,QAAO;CAAE,CAAE,CAAC;AACzF;AAoCA,MAAa,kBAAkB,IAAI,eAA+B,0CAA0C;AAiB5G,SAAgB,sBAAsB,UAAwB;CAC5D,OAAO,yBAAyB,CAAC;EAAE,SAAS;EAAiB,UAAU;CAAQ,CAAE,CAAC;AACpF;AC1DA,MAAM,mBAAwC;CAAC;CAAO;CAAU;AAAM;AAMtE,MAAM,sBAAsB;AAK5B,IAAa,gBAAb,MAAa,cAAa;CAOxB,cAAA;EALiB,KAAA,WAAW,OAAiB,QAAQ;EACpC,KAAA,aAAa,OAAe,WAAW;EACvC,KAAA,iBAAgC,OAAO,gBAAgB,EAAE,UAAU,KAAI,CAAE,KAAK,CAAA;EAC9E,KAAA,QAAqB,cAAc,QAAQ,OAAO,iBAAiB,EAAE,UAAU,KAAI,CAAE,CAAC;EAGrG,KAAK,uBAAuB,kBAAkB,KAAK,UAAU;CAC/D;CAWQ,OAAO,gBAAgB,MAAY;EACzC,MAAM,cAAsB,KAAK,QAAQ,6BAA6B,MAAM;EAE5E,OAAO,IAAI,OAAO,SAAS,cAAc,WAAW,cAAc,gBAAgB;CACpF;CAYQ,OAAO,uBAAuB,qBAA2B;EAC/D,IAAI;GACF,OAAO,mBAAmB,mBAAmB;EAC/C,QAAQ;GAEN,OAAO;EACT;CACF;CAWA,MAAM,MAAY;EAChB,IAAI,CAAC,KAAK,sBACR,OAAO;EAET,OAAO,mBAAmB,IAAI;EAE9B,OADe,cAAc,gBAAgB,IACtC,CAAA,CAAO,KAAK,KAAK,SAAS,MAAM;CACzC;CAWA,IAAI,MAAY;EACd,IAAI,KAAK,MAAM,IAAI,GAAG;GAEpB,MAAM,SADiB,cAAc,gBAAgB,mBAAmB,IAAI,CAC7D,CAAA,CAAO,KAAK,KAAK,SAAS,MAAM;GAC/C,OAAO,SAAS,KAAK,KAAK,YAAY,OAAO,IAAI,IAAI,IAAI;EAC3D,OACE,OAAO;CAEX;CAUA,SAAM;EACJ,IAAI,CAAC,KAAK,sBACR,OAAO,CAAA;EAGT,MAAM,UAAkC,CAAA;EACxC,MAAM,WAAqB,KAAK;EAEhC,IAAI,SAAS,UAAU,SAAS,WAAW,IACzC,SAAS,OAAO,MAAM,GAAG,CAAC,CAAC,SAAS,kBAAyB;GAC3D,MAAM,gBAAgB,cAAc,KAAI;GACxC,IAAI,CAAC,eACH;GAGF,MAAM,aAAa,cAAc,QAAQ,GAAG;GAC5C,IAAI,eAAe,IAEjB;GAEF,MAAM,aAAa,cAAc,uBAAuB,cAAc,UAAU,GAAG,UAAU,CAAC;GAE9F,IAAI,OAAO,OAAO,SAAS,UAAU,GACnC;GAGF,OAAO,eAAe,SAAS,YAAY;IACzC,OAAO,KAAK,YAAY,cAAc,UAAU,aAAa,CAAC,GAAG,UAAU;IAC3E,YAAY;IACZ,UAAU;IACV,cAAc;GACf,CAAA;EACH,CAAC;EAGH,OAAO;CACT;CAiDA,IACE,MACA,OACA,kBACA,MACA,QACA,QACA,UACA,aAA0C;EAE1C,IAAI,CAAC,KAAK,sBACR;EAIF,IAAI,OAAO,qBAAqB,YAAY,qBAAqB,QAAQ,4BAA4B,MAAM;GACzG,MAAM,cAAc;IAClB,SAAS;IACT;IACA;IACA;IACA;IACA;GACD;GAED,KAAK,IAAI,MAAM,OAAO,WAAW;GACjC;EACF;EAGA,MAAM,UAAU,cAAc,gBAAgB,MAAM,cAAc,aAAa,KAAK,gBAAgB,gBAAgB,CAAC;EACrH,IAAI,CAAC,SACH;EAGF,MAAM,eAAe,KAAK,YAAY,MAAM,KAAK;EACjD,IAAI,iBAAiB,QACnB;EAGF,IAAI,eAAuB,mBAAmB,IAAI,IAAI,MAAM,eAAe;EAE3E,IAAI,QAAQ,SACV,gBAAgB,aAAa,QAAQ,QAAQ,YAAW,IAAK;EAG/D,IAAI,QAAQ,MACV,gBAAgB,UAAU,QAAQ,OAAO;EAG3C,IAAI,QAAQ,QACV,gBAAgB,YAAY,QAAQ,SAAS;EAG/C,IAAI,QAAQ,aAAa,UAAU,CAAC,QAAQ,QAAQ;GAClD,QAAQ,SAAS;GACjB,QAAQ,KACN,+BAA+B,KAAI,uJACoE;EAE3G;EACA,IAAI,QAAQ,eAAe,CAAC,QAAQ,QAAQ;GAC1C,QAAQ,SAAS;GACjB,QAAQ,KAAK,+BAA+B,KAAI,yEAA0E;EAC5H;EACA,IAAI,QAAQ,QACV,gBAAgB;EAGlB,IAAI,CAAC,QAAQ,UACX,QAAQ,WAAW;EAGrB,gBAAgB,cAAc,QAAQ,WAAW;EAEjD,IAAI,QAAQ,aACV,gBAAgB;EAGlB,KAAK,SAAS,SAAS;CACzB;CAkCA,OACE,MACA,eACA,QACA,QACA,UAAmB;EAEnB,IAAI,CAAC,KAAK,sBACR;EAEF,MAAM,UAAU,cAAc,gBAAgB,eAAe,QAAQ,QAAQ,QAAQ;EACrF,KAAK,IAAI,MAAM,IAAI;GAAE,GAAG;GAAS,yBAAS,IAAI,KAAK,+BAA+B;EAAC,CAAE;CACvF;CA6BA,UACE,eACA,QACA,QACA,UAAmB;EAEnB,IAAI,CAAC,KAAK,sBACR;EAIF,KAAK,MAAM,cAAc,OAAO,KAAK,KAAK,OAAM,CAAE,GAEhD,IAAI,OAAO,kBAAkB,YAAY,kBAAkB,MACzD,KAAK,OAAO,YAAY,aAAa;OAErC,KAAK,OAAO,YAAY,eAAe,QAAQ,QAAQ,QAAQ;CAGrE;CAKwB;EAAA,KAAA,WAAwB;GAC9C,SAAS,UAAU,mBAAmB,KAAK;GAC3C,SAAS,UAAU,cAAc,uBAAuB,KAAK;EAC9D;CAAC;CAKsB;EAAA,KAAA,eAA4B;GAClD,SAAS,UAAW,oBAAoB,KAAK,KAAK,IAAI,QAAQ,mBAAmB,KAAK;GACtF,SAAS,UAAU,cAAc,uBAAuB,KAAK;EAC9D;CAAC;CAWM,OAAO,QAAQ,UAA+B;EACpD,IAAI,aAAa,WACf,OAAO,cAAc;EAEvB,IAAI,OAAO,aAAa,YAAY,aAAa,MAC/C,OAAO;EAET,OAAO,cAAc;CACvB;CAaQ,YAAY,MAAc,OAAa;EAC7C,MAAM,eAAe,KAAK,MAAM,OAAO,OAAO,IAAI;EAClD,IAAI,OAAO,iBAAiB,YAAY,cAAc,mBAAmB,YAAY,GAAG;GACtF,QAAQ,KAAK,+BAA+B,KAAI,yFAA0F;GAC1I;EACF;EACA,OAAO;CACT;CAYQ,YAAY,OAAe,MAAY;EAC7C,IAAI;GACF,OAAO,KAAK,MAAM,OAAO,OAAO,IAAI;EACtC,QAAQ;GACN,OAAO;EACT;CACF;CAcQ,OAAO,aAAa,UAAyB,UAAyB,CAAA,GAAE;EAC9E,MAAM,SAAkC,EAAE,GAAG,SAAQ;EACrD,KAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,OAAO,GAC/C,IAAI,UAAU,UAAa,UAAU,MACnC,OAAO,OAAO;EAGlB,OAAO;CACT;CAiBQ,OAAO,gBAAgB,MAAc,UAAyB,CAAA,GAAE;EACtE,MAAM,EAAE,SAAS,GAAG,UAAyB;EAC7C,MAAM,SAA6B;EAEnC,KAAK,MAAM,aAAa,CAAC,QAAQ,QAAQ,GAAY;GACnD,MAAM,iBAAiB,OAAO;GAC9B,IAAI,OAAO,mBAAmB,YAAY,cAAc,mBAAmB,cAAc,GAAG;IAC1F,QAAQ,KAAK,+BAA+B,KAAI,2BAA4B,UAAS,sCAAuC;IAC5H;GACF;EACF;EACA,IAAI,SAAS;GACX,MAAM,OAAO,OAAO,YAAY,WAAW,IAAI,KAAK,KAAK,IAAG,IAAK,UAAU,MAAO,KAAK,KAAK,EAAE,IAAI;GAClG,IAAI,gBAAgB,QAAQ,OAAO,SAAS,KAAK,QAAO,CAAE,GACxD,OAAO,UAAU;QAEjB,QAAQ,KAAK,+BAA+B,KAAI,oCAAqC,OAAO,OAAO,EAAC,GAAI;EAE5G;EACA,IAAI,OAAO,aAAa,UAAa,OAAO,aAAa,MAAM;GAC7D,MAAM,WAAW,iBAAiB,MAAM,UAAU,MAAM,YAAW,MAAO,OAAO,OAAO,QAAQ,CAAC,CAAC,YAAW,CAAE;GAC/G,IAAI,UACF,OAAO,WAAW;QACb;IACL,QAAQ,KAAK,+BAA+B,KAAI,qCAAsC,OAAO,OAAO,QAAQ,EAAC,GAAI;IACjH,OAAO,OAAO;GAChB;EACF;EACA,OAAO;CACT;CAYQ,OAAO,mBAAmB,OAAa;EAC7C,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,MAAM,cAAa;GACnC,MAAM,OAAO,UAAU,WAAW,CAAC;GACnC,OAAO,cAAc,OAAO,OAAO,MAAQ,SAAS;EACtD,CAAC;CACH;CAcQ,OAAO,gBACb,eACA,QACA,QACA,UAAmB;EAEnB,IAAI,OAAO,kBAAkB,YAAY,kBAAkB,MACzD,OAAO,EAAE,GAAG,cAAa;EAE3B,OAAO;GAAE,MAAM;GAAe;GAAQ;GAAQ;EAAQ;CACxD;CAnhBW;EAAA,KAAA,OAAA,GAAA,mBAAA;GAAA,YAAA;GAAA,SAAA;GAAA,UAAA;GAAA,MAAA;GAAa,MAAA,CAAA;GAAA,QAAA,GAAA,gBAAA;EAAA,CAAA;CAAA;CAAb;EAAA,KAAA,QAAA,GAAA,sBAAA;GAAA,YAAA;GAAA,SAAA;GAAA,UAAA;GAAA,MAAA;GAAa,YAFZ;EAAM,CAAA;CAAA;;AAEP,GAAA,yBAAA;CAAA,YAAA;CAAA,SAAA;CAAA,UAAA;CAAA,MAAA;CAAa,YAAA,CAAA;EAHzB,MAAA;EAAW,MAAA,CAAA,EACV,YAAY,OACb,CAAA"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ngx-cookie-service",
   "description": "Angular cookie service",
-  "version": "22.0.0",
+  "version": "22.2.0",
   "license": "MIT",
   "author": "Stepan Suvorov <stevermeister@gmail.com>",
   "keywords": [
@@ -113,4 +113,4 @@
   },
   "sideEffects": false,
   "type": "module"
-}
+}

package/types/ngx-cookie-service.d.ts

@@ -1,133 +1,335 @@
-import * as i0 from '@angular/core';
-
-type SameSite = 'Lax' | 'None' | 'Strict';
-interface CookieOptions {
-    expires?: number | Date;
-    path?: string;
-    domain?: string;
-    secure?: boolean;
-    sameSite?: SameSite;
-    partitioned?: boolean;
+import * as i0 from "@angular/core";
+import { EnvironmentProviders, InjectionToken } from "@angular/core";
+export type SameSite = 'Lax' | 'None' | 'Strict';
+export interface CookieOptions {
+  expires?: number | Date;
+  path?: string;
+  domain?: string;
+  secure?: boolean;
+  sameSite?: SameSite;
+  partitioned?: boolean;
 }
-declare class CookieService {
-    private readonly documentIsAccessible;
-    private readonly document;
-    private readonly platformId;
-    constructor();
-    /**
-     * Get cookie Regular Expression
-     *
-     * @param name Cookie name
-     * @returns property RegExp
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    private static getCookieRegExp;
-    /**
-     * Gets the decoded version of an encoded component of a Uniform Resource Identifier (URI).
-     *
-     * @param encodedURIComponent A value representing an encoded URI component.
-     *
-     * @returns The decoded version of an encoded component of a Uniform Resource Identifier (URI).
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    private static safeDecodeURIComponent;
-    /**
-     * Return `true` if {@link Document} is accessible, otherwise return `false`
-     *
-     * @param name Cookie name
-     * @returns boolean - whether cookie with specified name exists
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    check(name: string): boolean;
-    /**
-     * Get cookies by name
-     *
-     * @param name Cookie name
-     * @returns property value
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    get(name: string): string;
-    /**
-     * Get all cookies in JSON format
-     *
-     * @returns all the cookies in json
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    getAll(): Record<string, string>;
-    /**
-     * Set cookie based on provided information
-     *
-     * @param name     Cookie name
-     * @param value    Cookie value
-     * @param expires  Number of days until the cookies expires or an actual `Date`
-     * @param path     Cookie path
-     * @param domain   Cookie domain
-     * @param secure   Secure flag
-     * @param partitioned Partitioned flag
-     * @param sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    set(name: string, value: string, expires?: CookieOptions['expires'], path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite, partitioned?: CookieOptions['partitioned']): void;
-    /**
-     * Set cookie based on provided information
-     *
-     * Cookie's parameters:
-     * <pre>
-     * expires  Number of days until the cookies expires or an actual `Date`
-     * path     Cookie path
-     * domain   Cookie domain
-     * secure flag
-     * sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`
-     * </pre>
-     *
-     * @param name     Cookie name
-     * @param value    Cookie value
-     * @param options  Body with cookie's params
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    set(name: string, value: string, options?: CookieOptions): void;
-    /**
-     * Delete cookie by name at given path and domain. If not path is not specified, cookie at '/' path will be deleted.
-     *
-     * @param name   Cookie name
-     * @param path   Cookie path
-     * @param domain Cookie domain
-     * @param secure Cookie secure flag
-     * @param sameSite Cookie sameSite flag - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    delete(name: string, path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite): void;
-    /**
-     * Delete all cookies at given path and domain. If not path is not specified, all cookies at '/' path will be deleted.
-     *
-     * @param path   Cookie path
-     * @param domain Cookie domain
-     * @param secure Is the Cookie secure
-     * @param sameSite Is the cookie same site
-     *
-     * @author: Stepan Suvorov
-     * @since: 1.0.0
-     */
-    deleteAll(path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite): void;
-    static ɵfac: i0.ɵɵFactoryDeclaration<CookieService, never>;
-    static ɵprov: i0.ɵɵInjectableDeclaration<CookieService>;
+/**
+ * Attributes that identify the cookie to delete. They must match the attributes the cookie was set with.
+ */
+export type DeleteCookieOptions = Omit<CookieOptions, 'expires'>;
+export declare class CookieService {
+  private readonly documentIsAccessible;
+  private readonly document;
+  private readonly platformId;
+  private readonly defaultOptions;
+  private readonly codec;
+  constructor();
+  /**
+   * Get cookie Regular Expression
+   *
+   * @param name Cookie name
+   * @returns property RegExp
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  private static getCookieRegExp;
+  /**
+   * Gets the decoded version of an encoded component of a Uniform Resource Identifier (URI).
+   *
+   * @param encodedURIComponent A value representing an encoded URI component.
+   *
+   * @returns The decoded version of an encoded component of a Uniform Resource Identifier (URI).
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  private static safeDecodeURIComponent;
+  /**
+   * Return `true` if {@link Document} is accessible, otherwise return `false`
+   *
+   * @param name Cookie name
+   * @returns boolean - whether cookie with specified name exists
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  check(name: string): boolean;
+  /**
+   * Get cookies by name
+   *
+   * @param name Cookie name
+   * @returns property value
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  get(name: string): string;
+  /**
+   * Get all cookies in JSON format
+   *
+   * @returns all the cookies in json
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  getAll(): Record<string, string>;
+  /**
+   * Set cookie based on provided information
+   *
+   * @param name     Cookie name
+   * @param value    Cookie value
+   * @param expires  Number of days until the cookies expires or an actual `Date`
+   * @param path     Cookie path
+   * @param domain   Cookie domain
+   * @param secure   Secure flag
+   * @param partitioned Partitioned flag
+   * @param sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  set(name: string, value: string, expires?: CookieOptions['expires'], path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite, partitioned?: CookieOptions['partitioned']): void;
+  /**
+   * Set cookie based on provided information
+   *
+   * Cookie's parameters:
+   * <pre>
+   * expires  Number of days until the cookies expires or an actual `Date`
+   * path     Cookie path
+   * domain   Cookie domain
+   * secure flag
+   * sameSite OWASP same site token `Lax`, `None`, or `Strict`. Defaults to `Lax`
+   * </pre>
+   *
+   * @param name     Cookie name
+   * @param value    Cookie value
+   * @param options  Body with cookie's params
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  set(name: string, value: string, options?: CookieOptions): void;
+  /**
+   * Delete cookie by name at given path and domain.
+   *
+   * If `path` is not specified, no `Path` attribute is written and the browser uses its default path: the directory of the URL
+   * the page was loaded at (not the current router URL). To delete a cookie that was set with `path: '/'`, pass `'/'` here too.
+   *
+   * @param name   Cookie name
+   * @param path   Cookie path
+   * @param domain Cookie domain
+   * @param secure Cookie secure flag
+   * @param sameSite Cookie sameSite flag - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie/SameSite
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  delete(name: string, path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite): void;
+  /**
+   * Delete cookie by name. The options must match the attributes the cookie was set with: `path` and `domain` select the
+   * cookie, and `partitioned: true` is required to delete a Partitioned cookie.
+   *
+   * If `path` is not specified, no `Path` attribute is written and the browser uses its default path: the directory of the URL
+   * the page was loaded at (not the current router URL). To delete a cookie that was set with `path: '/'`, pass `'/'` here too.
+   *
+   * @param name    Cookie name
+   * @param options Cookie attributes: `path`, `domain`, `secure`, `sameSite` and `partitioned`
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.1.0
+   */
+  delete(name: string, options?: DeleteCookieOptions): void;
+  /**
+   * Delete all cookies at given path and domain.
+   *
+   * If `path` is not specified, the browser's default path is used for each cookie, as described for {@link delete}.
+   *
+   * @param path   Cookie path
+   * @param domain Cookie domain
+   * @param secure Is the Cookie secure
+   * @param sameSite Is the cookie same site
+   *
+   * @author: Stepan Suvorov
+   * @since: 1.0.0
+   */
+  deleteAll(path?: CookieOptions['path'], domain?: CookieOptions['domain'], secure?: CookieOptions['secure'], sameSite?: SameSite): void;
+  /**
+   * Delete all cookies that can currently be accessed, using the same attributes for each one.
+   *
+   * If `path` is not specified, the browser's default path is used for each cookie, as described for {@link delete}.
+   *
+   * @param options Cookie attributes: `path`, `domain`, `secure`, `sameSite` and `partitioned`
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.1.0
+   */
+  deleteAll(options?: DeleteCookieOptions): void;
+  /**
+   * Built-in `'uri'` encoding: `encodeURIComponent`, decoded with {@link CookieService.safeDecodeURIComponent}.
+   */
+  private static readonly uriCodec;
+  /**
+   * Built-in `'minimal'` encoding: values made only of cookie-octets are written as-is, others use `encodeURIComponent`.
+   */
+  private static readonly minimalCodec;
+  /**
+   * Resolves the encoding provided with {@link provideCookieEncoding} to a codec, defaulting to `'uri'`.
+   *
+   * @param encoding Provided encoding, or `null` when none was provided
+   * @returns The codec to use
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.2.0
+   */
+  private static toCodec;
+  /**
+   * Encodes a cookie value with the configured encoding. Returns `undefined`, with a warning, when the result can't be
+   * written safely because it isn't a string or contains `;` or a control character.
+   *
+   * @param name  Cookie name
+   * @param value Cookie value
+   * @returns The encoded value, or `undefined` to skip the write
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.2.0
+   */
+  private encodeValue;
+  /**
+   * Decodes a cookie value with the configured encoding. If a custom `decode` throws, the raw value is returned.
+   *
+   * @param value Raw cookie value
+   * @param name  Decoded cookie name
+   * @returns The decoded value
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.2.0
+   */
+  private decodeValue;
+  /**
+   * Merges the app-wide defaults from {@link provideCookieOptions} under the options of one call.
+   *
+   * Values passed to the call win, and `undefined` or `null` values don't override a default.
+   *
+   * @param defaults Default cookie options
+   * @param options  Options passed to the call
+   * @returns A new, merged CookieOptions object
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.2.0
+   */
+  private static withDefaults;
+  /**
+   * Returns a validated copy of the options, or `undefined` if the cookie must not be written.
+   *
+   * A `path` or `domain` containing `;` or a control character could inject attributes or change the cookie's scope, so the
+   * whole write is skipped. An invalid `expires` is dropped, which makes a session cookie as browsers already did, and an
+   * unknown `sameSite` falls back to the `Lax` default. Each case logs a warning. A numeric `expires` (days
+   * from now) is converted to a `Date`, and `sameSite` is matched case-insensitively.
+   *
+   * @param name    Cookie name, used in warnings
+   * @param options Cookie options
+   * @returns A validated copy of the options, or `undefined` to skip the write
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.1.0
+   */
+  private static validateOptions;
+  /**
+   * Whether a cookie attribute value contains `;` or an ASCII control character, which would end the attribute early or
+   * corrupt the header.
+   *
+   * @param value Attribute value
+   * @returns `true` if the value is unsafe to write
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.1.0
+   */
+  private static hasUnsafeCharacter;
+  /**
+   * Builds delete options from either an options object or the positional `path`, `domain`, `secure` and `sameSite` arguments.
+   *
+   * @param pathOrOptions Either a DeleteCookieOptions object or the cookie path
+   * @param domain   Cookie domain
+   * @param secure   Cookie secure flag
+   * @param sameSite Cookie sameSite flag
+   * @returns A new DeleteCookieOptions object
+   *
+   * @author: Pavankumar Jadda
+   * @since: 22.1.0
+   */
+  private static toDeleteOptions;
+  static ɵfac: i0.ɵɵFactoryDeclaration<CookieService, never>;
+  static ɵprov: i0.ɵɵInjectableDeclaration<any>;
 }
-
-export { CookieService };
-export type { CookieOptions, SameSite };
+/**
+ * App-wide default options for {@link CookieService}. Provide them with {@link provideCookieOptions}.
+ *
+ * @author: Pavankumar Jadda
+ * @since: 22.2.0
+ */
+export declare const COOKIE_OPTIONS: InjectionToken<CookieOptions>;
+/**
+ * Sets default options for every `set()`, `delete()` and `deleteAll()` call of {@link CookieService}.
+ *
+ * Options passed to a call win over these defaults, and `undefined` values don't override them. A call that passes its own
+ * `expires` replaces the default one, so `delete()` always expires the cookie.
+ *
+ * ```ts
+ * export const appConfig: ApplicationConfig = {
+ *   providers: [provideCookieOptions({ path: '/', secure: true, sameSite: 'Strict' })],
+ * };
+ * ```
+ *
+ * @param options Default cookie options
+ * @returns Providers to add to the application config
+ *
+ * @author: Pavankumar Jadda
+ * @since: 22.2.0
+ */
+export declare function provideCookieOptions(options: CookieOptions): EnvironmentProviders;
+/**
+ * A custom encoding for cookie values, used with {@link provideCookieEncoding}.
+ *
+ * `encode` runs on every value written by `set()`, and `decode` on every value read by `get()` and `getAll()`. Cookie names
+ * keep the default encoding. If `decode` throws, the raw value is returned instead.
+ *
+ * @author: Pavankumar Jadda
+ * @since: 22.2.0
+ */
+export interface CookieCodec {
+  encode(value: string, name: string): string;
+  decode(value: string, name: string): string;
+}
+/**
+ * How {@link CookieService} encodes cookie values:
+ *
+ * - `'uri'` (default): `encodeURIComponent` and `decodeURIComponent`.
+ * - `'minimal'`: values made only of characters allowed in a cookie value (RFC 6265 cookie-octets, except `%`) are written
+ *   as-is, and other values are encoded with `encodeURIComponent`. This is the default of the jshttp `cookie` package used
+ *   by Express, and keeps values such as JWTs and base64 readable by servers that don't URL-decode cookies.
+ * - A {@link CookieCodec} for a custom scheme.
+ *
+ * @author: Pavankumar Jadda
+ * @since: 22.2.0
+ */
+export type CookieEncoding = 'uri' | 'minimal' | CookieCodec;
+/**
+ * The cookie value encoding for {@link CookieService}. Provide it with {@link provideCookieEncoding}.
+ *
+ * @author: Pavankumar Jadda
+ * @since: 22.2.0
+ */
+export declare const COOKIE_ENCODING: InjectionToken<CookieEncoding>;
+/**
+ * Sets how {@link CookieService} encodes cookie values when writing them and decodes them when reading.
+ *
+ * ```ts
+ * export const appConfig: ApplicationConfig = {
+ *   providers: [provideCookieEncoding('minimal')],
+ * };
+ * ```
+ *
+ * @param encoding `'uri'` (default), `'minimal'`, or a custom {@link CookieCodec}
+ * @returns Providers to add to the application config
+ *
+ * @author: Pavankumar Jadda
+ * @since: 22.2.0
+ */
+export declare function provideCookieEncoding(encoding: CookieEncoding): EnvironmentProviders;