cookie handling

cookie.js

// https://github.com/js-cookie/js-cookie/blob/master/src/converter.mjs
const cookieValueEncode = (val) => encodeURIComponent(val).replace(/%(2[346BF]|3[AC-F]|40|5[BDE]|60|7[BCD])/g, decodeURIComponent)
const cookieValueDecode = (val) => val.replace(/(%[\dA-F]{2})+/gi, decodeURIComponent)
const cookieNameEncode = (name) => encodeURIComponent(name).replace(/%(2[346B]|5E|60|7C)/g, decodeURIComponent).replace(/[()]/g, escape)

const getCookie = (name) => Object.fromEntries(document.cookie.split(';').map((v) => {
  const [ name, ...value ] = v.trim().split('=').map(cookieValueDecode)
  return [ name, value.join('=')]
}))[name]

// set cookie (to delete set a date in the past)
const setCookie = (name, value, expiresInDays) => {
  // https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
  document.cookie = [
    `${cookieNameEncode(name)}=${cookieValueEncode(value)}`, // safe value encoder if needed: https://github.com/js-cookie/js-cookie/blob/master/src/converter.mjs
    'Path=/', // required to be accessed on all paths
    `Expires=${new Date(Date.now() + expiresInDays * 864e5).toUTCString()}`, // No expiry means "session" cookie
    'Secure', // sent to the server only with an encrypted request over the HTTPS (commented out coz it doesn't work on dev/localhost)
    //'HttpOnly', // means its not accessible through JS, but also means in cant be set in clientside JS
    'SameSite=Strict' // cookie is sent only to the same site as the one that originated it (needed to suppress chrome warnings)
  ].join('; ')
}