Skip to content
This repository has been archived by the owner on Apr 12, 2024. It is now read-only.

Cookie path not settable using $cookies service #1786

Closed
kgj opened this issue Jan 10, 2013 · 35 comments
Closed

Cookie path not settable using $cookies service #1786

kgj opened this issue Jan 10, 2013 · 35 comments

Comments

@kgj
Copy link

kgj commented Jan 10, 2013

When using the $cookies service, there is no easy way to set the path of the cookie to match every path on the domain.

On line 3137 of angular.1.0.2.js the path of all cookies created is set as self.baseHref()
When trying to write the same cookie from different paths this results in additional cookies being created due to the different path.

With no facility implemented to pass in a path, the path needs to be hard coded in order to be changed.

alonbardavid added a commit to alonbardavid/angular.js that referenced this issue Apr 20, 2013
$cookieStore service had no way to set cookie attributes (such as expires).
The api for $cookieStore.put and $cookieStore.remove now has a third argument-
options,which allows setting cookie attributes, or deleting cookies under a
specific path.
- to change the path and/or expiration date of a cookie, you can pass an
  options object as the third argument to cookies(name,value).
  the options object can override Path and Expires when adding a value.
  You can pass either path, expires,none or both.
- the path option is checked to be a string and be partial to window.location
  otherwise, the default path is used. (warning is logged)
- the expires option is checked to be a Date and in the future,
  otherwise no expiration is set. (warning is logged)
- you can now delete a cookie on a specific path by calling
  cookie(name,undefined,{path:x})

The $cookie service remains unchanged since supporting cookie attributes
would mean serious backward comptability issues.
Foundations were put in place to make supporting $cookie easier.
GENERIC TEST CHANGE:
To support checking cookie path, all unit-tests now run on path "/karma/tests"
Documentation was updated for both $cookie and $cookieStore with examples.

closes	angular#1786, angular#1320
BREAKING CHANGE: As part of the change, deleting a cookie  now deletes
   cookies set in multiple paths (and duplicate cookies if exists).
   Previously only cookies set in the / path were deleted.
   Since it is not intutive, if this change breaks someones code, it is
   probably as an accidental side-effect.
   It is reasonable to assume that most people actually wanted to delete the
   cookie even if it wasn't set in the same path (since they can see it).
   So while this is a breaking change, it fixes bad behaviour.
   If needed, you can delete the cookie in a specific path using $cookieStore.
@mike-spainhower
Copy link

👍

1 similar comment
@thepixelmonk
Copy link

👍

@jaymes-bearden
Copy link

Did this ever get accepted?

@odino
Copy link

odino commented Oct 29, 2013

👍

3 similar comments
@hd-deman
Copy link

👍

@derfsubterfuge
Copy link

👍

@HNygard
Copy link
Contributor

HNygard commented Mar 18, 2014

👍

@andrezero
Copy link

👍

@greengerong
Copy link

We need this feature. +1

@maxtillich
Copy link

+1

@petebacondarwin petebacondarwin self-assigned this Apr 9, 2014
@andyhorng
Copy link

+1

6 similar comments
@paveleremin
Copy link

+1

@bdelaforest
Copy link

+1

@andretges
Copy link
Contributor

+1

@WhyNotHugo
Copy link

👍

@krisivanov
Copy link

+1

@battlesnake
Copy link

+1

@bdelaforest
Copy link

In the meantime you can use https://github.com/ivpusic/angular-cookie.

example :
ipCookie('cookie_key', data, { path: '/' });

@ansorensen
Copy link

+1

@h2non
Copy link

h2non commented Jul 2, 2014

+1
I've finally used angular-cookie

@Meligy
Copy link

Meligy commented Jul 7, 2014

+1

@ajspera
Copy link

ajspera commented Aug 11, 2014

To anyone looking to keep all cookie paths the same everywhere, adding <base href="/"> to the head tag of your html will make all cookie paths "/" and accessible at any path.

@chesleybrown
Copy link

Thank you @ajspera. Can confirm your solution works.

@btford btford removed the gh: issue label Aug 20, 2014
@tenaciousRas
Copy link

Did the documentation get updated? The proposed solution seems like a workaround. It's been a while since I had to use base href on a website. The last time I did I'm pretty sure it was a legacy situation on the server side and we couldn't have used this workaround without piles of money and time to rebuild the backend. Isn't the bug/feature request a better solution overall than the one accepted to close this issue?

@rschoenbichler
Copy link

+1

4 similar comments
@lynndylanhurley
Copy link

+1

@toshipon
Copy link

toshipon commented Nov 7, 2014

👍

@vfiebig
Copy link

vfiebig commented Nov 7, 2014

+1

@selvakn
Copy link

selvakn commented Nov 17, 2014

👍

@web2wire
Copy link

+1

I have the opposite problem, I have a site at abc.xyz and I need cookies to be restricted to abc.xyz/a or abc.xyz/b etc so I need to be able to explicitly set the path of the cookies one level down from the base.

@dallasvogels
Copy link

👍

@FraGoTe
Copy link

FraGoTe commented Jan 28, 2015

👍

3 similar comments
@afc163
Copy link

afc163 commented Feb 2, 2015

👍

@MikeElghali
Copy link

👍

@simonykq
Copy link

+1

@shahata shahata closed this as completed in 92c366d Mar 2, 2015
hansmaad pushed a commit to hansmaad/angular.js that referenced this issue Mar 10, 2015
The `put`, `putObject` and `remove` methods now take an options parameter
where you can provide additional options for the cookie value, such as `expires`,
`path`, `domain` and `secure`.

Closes angular#8324
Closes angular#3988
Closes angular#1786
Closes angular#950
netman92 pushed a commit to netman92/angular.js that referenced this issue Aug 8, 2015
The `put`, `putObject` and `remove` methods now take an options parameter
where you can provide additional options for the cookie value, such as `expires`,
`path`, `domain` and `secure`.

Closes angular#8324
Closes angular#3988
Closes angular#1786
Closes angular#950
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.