Function createSecureCookie

worker/utils/authUtils.ts:156–178

(options: CookieOptions)

 * Create secure cookie string with all options
 */
export function createSecureCookie(options: CookieOptions): string {
	const {
		name,
		value,
		maxAge = 7 * 24 * 60 * 60, // 7 days default
		secure = true,
		sameSite = 'Lax',
		path = '/',
		domain,
	} = options;

	const parts = [`${name}=${encodeURIComponent(value)}`];

	if (maxAge > 0) parts.push(`Max-Age=${maxAge}`);
	if (path) parts.push(`Path=${path}`);
	if (domain) parts.push(`Domain=${domain}`);
	if (secure) parts.push('Secure');
	if (sameSite) parts.push(`SameSite=${sameSite}`);

    parts.push('HttpOnly');

	return parts.join('; ');
}

/**
 * Set auth cookies with proper security settings