From dddd6d9f9ec8f9f75b67f60409240fee4ae3ceb3 Mon Sep 17 00:00:00 2001 From: Anna-Jin Date: Tue, 19 Jul 2022 22:37:46 +0900 Subject: [PATCH] =?UTF-8?q?#35=20[Update]=20=EB=84=A4=EB=B2=88=EC=A7=B8=20?= =?UTF-8?q?=EC=8B=9C=EB=8F=84?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit 쿠키가 삭제되지 않는 문제 해결하기 --- .../com/mpnp/baechelin/util/CookieUtil.java | 35 ++++++++++--------- 1 file changed, 18 insertions(+), 17 deletions(-) diff --git a/src/main/java/com/mpnp/baechelin/util/CookieUtil.java b/src/main/java/com/mpnp/baechelin/util/CookieUtil.java index 83e4253..46e5f6c 100644 --- a/src/main/java/com/mpnp/baechelin/util/CookieUtil.java +++ b/src/main/java/com/mpnp/baechelin/util/CookieUtil.java @@ -28,24 +28,24 @@ public static Optional getCookie(HttpServletRequest request, String name // 쿠키 생성 public static void addCookie(HttpServletResponse response, String name, String value, int maxAge) { - ResponseCookie cookie = ResponseCookie.from(name, value) - .domain(".bae-chelin.com") - .path("/") - .httpOnly(true) - .maxAge(maxAge) - .secure(true) - .sameSite("None") - .build(); - - response.addHeader("Set-Cookie", cookie.toString()); -// Cookie cookie = new Cookie(name, value); -// -// cookie.setPath("/"); -// cookie.setHttpOnly(true); // XSS 공격을 막기 위한 설정 -// cookie.setMaxAge(maxAge); -// cookie.setSecure(true); +// ResponseCookie cookie = ResponseCookie.from(name, value) +// .domain(".bae-chelin.com") +// .path("/") +// .httpOnly(true) +// .maxAge(maxAge) +// .secure(true) +// .sameSite("None") +// .build(); // -// response.addCookie(cookie); +// response.addHeader("Set-Cookie", cookie.toString()); + Cookie cookie = new Cookie(name, value); + + cookie.setPath("/"); + cookie.setHttpOnly(true); // XSS 공격을 막기 위한 설정 + cookie.setMaxAge(maxAge); + cookie.setDomain(".bae-chelin.com"); + + response.addCookie(cookie); } // 쿠키 삭제 @@ -59,6 +59,7 @@ public static void deleteCookie(HttpServletRequest request, HttpServletResponse cookie.setPath("/"); cookie.setMaxAge(0); cookie.setSecure(false); + cookie.setDomain(""); response.addCookie(cookie); }