Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is it possible to modify cookies when using nginx as a reverse proxy similar to what Set-Cookie does in apache?

I have a web application that sets session cookies and I wish to append the HttpOnly flag to them before they are served by nginx. Unfortunatly I cannot modify the source code of the application to do it there.

share|improve this question
2  
Possible duplicate of serverfault.com/questions/278319/…. Seems to be that the same "It's not possible" and methods for resolving it apply. –  Kyle Smith Apr 1 '12 at 21:50
    
didn't tried it, but I suppose that you can modify the header via wiki.nginx.org/HttpHeadersMoreModule –  hellvinz May 23 '12 at 9:32

1 Answer 1

You can always use add_header to add one, but even if you parse cookies coming down from backend looking at the http_cookie variable, you won't be able to modify them using vanilla nginx.

What you could use however is the 3rd-party Lua module. The link provided by Kyle Sith has an answer containg a small code snippet manipulating cookies (http://serverfault.com/a/448887/140131).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.