This package provides an HTTP Middleware that sets a X-Allow-Cookie
header for configured request patterns which
will set a cookie.
This can be useful when only a select few requests should be able to set a cookie. Varnish can check if the beresp
contains a Set-Cookie
header and remove it if X-Allow-Cookie
is not set.
composer require netlogix/varnish-allowcookie
The allowed patterns can be configured like this:
Netlogix:
Varnish:
AllowCookie:
allowedRequestPathPatterns:
- '#^/neos#'
- '#^/some/other/(request|uri)#'
Requests staring with /neos
will be allowed by default.
Tests currently require this package to be installed in a Flow environment.
FLOW_CONTEXT=Testing/Unit ./bin/phpunit -c Packages/Application/Netlogix.Varnish.AllowCookie/phpunit.xml.dist --testsuite="Unit" --bootstrap "Build/BuildEssentials/PhpUnit/UnitTestBootstrap.php"