Flask: How to remove cookies?

Question

I set cookies with the code suggested in the docs:

from flask import make_response  @app.route('/') def index():     resp = make_response(render_template(...))     resp.set_cookie('username', 'the username')     return resp 

But how do I remove them? There is no remove_cookie method. I tried:

if request.cookies.get('sessionID');     request.cookies.pop('sessionID', None) 

but it turns out that the request.cookies object is immutable. What do I do?

Answer 1

There's no HTTP header for deleting a cookie. Traditionally you just set the cookie to a dummy value with an expiration date in the past, so it immediately expires.

resp.set_cookie('sessionID', '', expires=0) 

This will set the session id cookie to an empty string that expires at unixtime 0, which is almost certainly in the past.

Answer 2

We can make us of delete_cookie() available from flask.Response.

resp.delete_cookie('username') 

This will delete the cookie on response. Here is delete_cookie documentation.

Also you may want to have add path (default set to '/') and domain (default set to None).

resp.delete_cookie('username', path='/', domain='yourdomain.com') 

Here is the interpreter screenshot which shows delete_cookie object in flask.Response.