From the course: Master Next.js by Building Scalable Apps with Routing, Databases, and Performance

Unlock this course with a free trial

Join today to access over 25,200 courses taught by industry experts.

RQ: Cookie-based authentication

RQ: Cookie-based authentication - Next.js Tutorial

From the course: Master Next.js by Building Scalable Apps with Routing, Databases, and Performance

Start my 1-month free trial Buy for my team

RQ: Cookie-based authentication

“

Now, there is one important question and that is what are the security steps to take while configuring a cookie. So when configuring cookies, there are several important security steps to ensure that cookies are used safely and protected against security vulnerabilities. There are several options to configure cookies. By setting up the HTTP only flag, we can prevent the access of cookies using client-side JavaScript which can prevent cross-site scripting attacks. Then we have the secure flag which ensures that the cookie is only sent over the secured connections. By setting up the same site attribute, we can restrict how cookies are sent with the cross site requests, so it will prevent the cross site request forgery attacks. And here we can also define the path where we have to store cookies and by setting up the appropriate domain, we can access the cookie from that specific domain or sub domain only.

Contents