CODEWITHSUNDEEP
sessionangularjs
daydreamer
daydreamer

Reputation: 91949

AngularJS: Can not read session value

I want to retrieve this value in my angular front end, but it says undefined

The relevant code is

   $scope.logout = function () {
        console.log('session value', $cookieStore.get('session'));
    }

and my app is also configured to include ngCookies

var app = angular.module('myApp', ['ngCookies']);

when I run my application, i see

session value undefined

I can however, see the session in Chrome Dev Tools

enter image description here

What is that I am missing?

Upvotes: 14

Views: 13159

Answers (2)

Ivan Aranibar
Ivan Aranibar

Reputation: 2286

UPDATE

It is worth noting that $cookieStore is deprecated and now for accessing the cookies one should use ngCookies (see ngCookies).

Upvotes: 1

Darin Dimitrov
Darin Dimitrov

Reputation: 1038710

What is that I am missing?

The server set the cookie as Session cookie (HttpOnly flag). This means that you cannot access this cookie on the client. The client will send the cookie to the server on each request but the client has no access to its value. That's the very definition of an HttpOnly cookie. If you want to be able to access this cookie value on the client you should modify your server side script so that when it is setting the cookie it doesn't append the HttpOnly flag to it. Obviously this comes with the corresponding disclaimer about the security vulnerability that you might be opening on your site depending on the purpose and specific value stored in this cookie.

Upvotes: 27

Related Questions