$.cookie not returning all cookies

Question

I have cookies list like this

 key value domain expiry HTTP usid 1234567 abc.domain.com 2014-12-01T23:54:12.256Z yes ssid 1234534 abc.domain.com 2014-12-01T23:54:12.256Z yes _ga GA1.1.323232323 domain.com 2014-12-01T23:54:12.256Z no

When I use $.cookie to get the cookies the output is

object _ga: "GA1.1.323232323" lang: "en"

also document.cookie returns the same result How can I get all the cookies present

plalx · Accepted Answer · 2014-11-01 15:12:03Z

1

I believe that you are dealing with HttpOnly cookies, which cannot be retrived through JavaScript. All accessible cookies should be returned by document.cookie.

If you have control over the server-side, then make sure that the HttpOnly option is not use for these if you want them to be accessible on the client.

It's also possible that the abc.domain.com cookies aren't returned because that's not the same domain as domain.com - Pointy

edited Nov 1, 2014 at 15:12

answered Nov 1, 2014 at 15:04

plalx

43.8k7 gold badges77 silver badges94 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

Pointy Over a year ago

It's also possible that the abc.domain.com cookies aren't returned because that's not the same domain as domain.com.

plalx Over a year ago

@Pointy Are they really considered two seperate domains, even if one is a sub-domain of the other?

Pointy Over a year ago

Well in general the same-origin policy treats the domain as a string in a "dumb" way, so I would not be surprised if that applied to cookies too.

hariszaman Over a year ago

yes the usid, ssid are httponly cookies, how can I clear those cookies

plalx Over a year ago

@hariszaman You want to clear them or read them on the client, it's not clear.

|

user4181760 · Accepted Answer · 2014-11-01 15:04:34Z

The cookies that you are not seeing may be HttpOnly cookies. This means that they cannot been seen using Javascript.

You can see them using a network trace tool or most browsers dev tools will show them in the network trace.

Look for headers that have the HttpOnly attribute like this

Set-Cookie: <name>=<value>[; <Max-Age>=<age>][; expires=<date>][; domain=<domain_name>][; path=<some_path>][; secure][; HttpOnly]

Collectives™ on Stack Overflow

$.cookie not returning all cookies

2 Answers 2

6 Comments

Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

6 Comments

Comments

Related