Get JSESSIONID value and create Cookie in AngularJS

Question

I'm using a Web RestFUL API from my client in AngularJS.

app.controller('LoginController', [
    '$http',
    '$cookies', 

    function($http, $cookies) {
      this.credentials = {};

      this.http = $http;

      this.login = function() {
        console.log(this.credentials);

        var authdata = btoa(
            this.credentials.username +
            ':' +
            this.credentials.password
        );

        $http.defaults.headers.common['Authorization'] = 'Basic ' + authdata;

        console.log($http);

        var res = $http.post("http://API_NAME/library");

        res.success(function(data, status, header){
            alert('Successfull func');

            console.log($cookies.get('JSESSIONID'));
        });

        res.error(function(data, status, headers, config) {
            console.log('Error Log');
        });
     };
   },
]);

Then, i have this Http headers Response

Set-Cookie:JSESSIONID=azekazEXAMPLErezrzez; Path=/; HttpOnly

I'm using ngCookies to get the JSESSIONID value and then create it manually in my browser, but i can't access it.

I already saw all the posts about this in StackOverflow, but they are deprecated or completely unclear.

Thanks for your interest and help.

Answer 1

You can't get HttpOnly cookies with JavaScript. That is the whole purpose of the HttpOnly flag.

That said, you shouldn't need to. The cookie should be sent automatically with any request to the same server. If you are dealing with cross-origin XHR requests, set your_XHR_instance.withCredentials to true to include cookies.