#cookies code explainers

ruby

class ApplicationController < ActionController::Base
  EXPERIMENTS = {
    checkout_button_color: %w[control blue green],
    onboarding_flow: %w[control streamlined]

How A/B test cohorts are assigned in Rails

a-b-testing cookies hashing

Intermediate 8 steps

go

package signup
 
var wizardCodec = securecookie.New(
	[]byte(os.Getenv("WIZARD_HASH_KEY")),

A cookie-backed signup wizard in Gin

cookies encryption multi-step-form

Intermediate 9 steps

rust

use axum::{
    body::Body,
    extract::Request,
    http::{header::SET_COOKIE, HeaderValue},

Flash messages via Axum middleware

middleware shared-state cookies

Intermediate 8 steps

typescript

import {
  createParamDecorator,
  ExecutionContext,
  UnauthorizedException,

A signed-cookie param decorator in NestJS

custom-decorators hmac timing-safe-comparison

Advanced 8 steps

php

<?php
 
final class RememberMeCookie
{

Signed remember-me cookies in PHP

authentication hmac cookies

Intermediate 8 steps

php

<?php
 
namespace App\Http\Middleware;

Resolving the current team in Laravel middleware

middleware multi-tenancy cookies

Intermediate 8 steps

javascript

import { NextResponse } from 'next/server';
 
const locales = ['en', 'fr', 'de', 'es'];
const defaultLocale = 'en';

Locale routing with Next.js middleware

middleware i18n content-negotiation

Intermediate 10 steps

java

@Configuration
@EnableRedisHttpSession(namespace = "myapp:sessions", maxInactiveIntervalInSeconds = 1800, flushMode = FlushMode.IMMEDIATE)
public class SessionConfig {

Backing HTTP sessions with Redis in Spring

session-management redis distributed-state

Intermediate 7 steps

javascript

const express = require('express');
const jwt = require('jsonwebtoken');
const crypto = require('crypto');

Refresh token rotation in Express

jwt token-rotation authentication

Advanced 9 steps

python

import secrets
from datetime import datetime, timedelta, timezone
 
from fastapi import APIRouter, Cookie, Depends, HTTPException, Response, status

Cookie session auth in FastAPI

session-authentication cookies dependency-injection

Intermediate 8 steps

go

package auth
 
import (
	"net/http"

Setting and reading secure session cookies in Go

cookies session-management security

Intermediate 6 steps

javascript

import { NextResponse } from 'next/server';
import { jwtVerify } from 'jose';
 
const PROTECTED_PREFIXES = ['/dashboard', '/settings', '/billing'];

Gating routes with Next.js middleware and JWTs

authentication middleware jwt

Intermediate 8 steps

javascript

const express = require('express');
const session = require('express-session');
const RedisStore = require('connect-redis').default;
const { createClient } = require('redis');

Redis-backed session auth in Express

sessions authentication redis

Intermediate 8 steps

rust

use axum::{
    extract::FromRef,
    http::StatusCode,
    response::{IntoResponse, Redirect},

Signed cookie sessions in Axum

sessions cookies authentication

Intermediate 8 steps

javascript

import { cookies } from 'next/headers';
import { NextResponse } from 'next/server';
import { SignJWT, jwtVerify } from 'jose';

JWT session cookies in a Next.js Route Handler

authentication jwt cookies

Intermediate 8 steps

go

package handlers
 
import (
	"net/http"

Cookie-based sessions in Gin

authentication cookies middleware

Intermediate 7 steps