- Add
sameSite
option for SameSite cookie support - pref: enable strict mode
- Fix
keys
deprecation message - deps: keygrip@~1.0.1
- Fix regression in 0.6.0 for array of strings in
keys
option
- Add
secure
constructor option for secure connection checking - Change constructor to signature
new Cookies(req, res, [options])
- Replace
new Cookies(req, res, key)
withnew Cookies(req, res, {'keys': keys})
- Replace
- Change prototype construction for proper "constructor" property
- Deprecate
secureProxy
option in.set
; usesecure
option instead- If
secure: true
throws even over SSL, use thesecure
constructor option
- If
- Throw on invalid values provided to
Cookie
constructor- This is not strict validation, but basic RFC 7230 validation
- Integrate with
req.protocol
for secure cookies - Support
maxAge
as well asmaxage
- Update package for repo move
- Allow passing an array of strings as keys
- TODO: write down history for these releases
- SSL cookies secure by default
- Use httpOnly by default unless explicitly false
- Delete sig cookie if signed cookie is deleted
- Always set path
- Add sensible defaults for path
- Inherit cookie properties to signature cookie
- Readme updates
- Initial release