cookie.js

.js

router.post('/cookie', (req, res) => {
  const localhost = req.headers.referer.includes('localhost');
  const decodedJWT = jwt_decode(req.body.token);
  let expiration = decodedJWT.expiration;
  expiration = Number(expiration);
  expiration =
    typeof expiration === 'number' && expiration > Date.now()
      ? expiration
      : new Date(Date.now() + TEN_HOURS);

  res.cookie('c', req.body.token, {
    httpOnly: localhost ? false : true,
    secure: true,
    expires: expiration,
    sameSite: 'none',
    hostOnly: true,
    path: '/'
  });
  res.json({ token: req.body.token });
});

router.get('/cookie', (req, res) => {
  const cookie = req.cookies && req.cookies['c'] ? req.cookies['c'] : undefined;

  res.json({ token: cookie });
});

router.get('/cookie/delete', (req, res) => {
  console.log('==============');
  console.log(req.get('host'));

  let host = req.get('host');
  const portIndex = host.indexOf(':');

  const cookieDomain =
    host.includes('localhost') || host.includes('127.0.0.1') ? host.substring(0, portIndex) : host;

  console.log(cookieDomain);

  res.clearCookie('c', {
    httpOnly: host.includes('localhost') ? false : true,
    secure: true,
    domain: cookieDomain,
    sameSite: 'none',
    hostOnly: true,
    path: '/'
  });
  res.send(200).end();
});