req.cookies with cookie-parser in Express - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of the cookie-parser middleware in Express?

cookie-parser helps Express read cookies sent by the browser. It parses cookie headers and makes cookies available as req.cookies.

beginner

How do you access cookies in an Express route handler after using cookie-parser?

You access cookies using req.cookies. For example, req.cookies.username gives the value of the cookie named 'username'.

beginner

Show the code to set up cookie-parser in an Express app.

<pre>import express from 'express';
import cookieParser from 'cookie-parser';

const app = express();
app.use(cookieParser());</pre>

intermediate

What happens if you try to read req.cookies without using cookie-parser?

req.cookies will be undefined because Express does not parse cookies by default. You must use cookie-parser to populate it.

intermediate

Can cookie-parser parse signed cookies? How do you enable this?

Yes, cookie-parser can parse signed cookies if you provide a secret string when you initialize it, like app.use(cookieParser('secret')). Signed cookies appear in req.signedCookies.

What does req.cookies contain in an Express app using cookie-parser?

A The session data stored on the server

B The raw cookie header string

C An object with cookie names and values sent by the client

D The response cookies to be sent

req.cookies is an object mapping cookie names to their values sent by the client browser.

How do you add cookie-parser middleware to an Express app?

A app.use(cookieParser())

B app.cookieParser()

C app.set('cookie-parser')

D app.use(express.cookieParser())

You add it by calling app.use(cookieParser()) after importing it.

If you want to read signed cookies, where do you find them?

A req.cookies

B req.signed

C req.headers.cookie

D req.signedCookies

Signed cookies are available in req.signedCookies after using cookie-parser with a secret.

What will happen if you forget to use cookie-parser but try to access req.cookies?

A <code>req.cookies</code> will be undefined

B <code>req.cookies</code> will be an empty object

C Express will throw an error

D Cookies will be parsed automatically

Without cookie-parser, req.cookies is undefined because Express does not parse cookies by default.

Which of these is NOT a feature of cookie-parser?

A Parsing cookies from request headers

B Signing cookies automatically on response

C Providing <code>req.cookies</code> and <code>req.signedCookies</code>

D Supporting cookie signature verification

cookie-parser parses cookies but does not sign cookies on response. Signing cookies is done when setting cookies manually.

Explain how to use cookie-parser in an Express app to read cookies sent by the browser.

Think about middleware setup and how Express handles requests.

Describe the difference between req.cookies and req.signedCookies when using cookie-parser.

Consider how cookie security is handled.

Practice

1. What does req.cookies represent in an Express app when using cookie-parser middleware?

easy

A. A function to set cookies on the response

B. An object containing cookies sent by the browser

C. A string of all cookies concatenated

D. An array of cookie names only

Solution

1. Step 1: Understand the role of cookie-parser

   The cookie-parser middleware parses cookies from the HTTP request headers.

2. Step 2: Identify what req.cookies holds

   After parsing, req.cookies is an object where each cookie name is a key and its value is the cookie's value.

3. Final Answer:

   An object containing cookies sent by the browser -> Option B

4. Quick Check:

   req.cookies = object of cookies [OK]

Hint: Remember: req.cookies is an object, not a string or function [OK]

Common Mistakes:

• Thinking req.cookies is a function
• Expecting req.cookies to be a string
• Confusing req.cookies with response cookies

2. Which of the following is the correct way to use cookie-parser middleware in an Express app?

easy

A. app.use(cookieParser);

B. app.cookieParser();

C. app.use(cookieParser());

D. ;)(resraPeikooc.ppa

Solution

1. Step 1: Recall middleware usage in Express

   Middleware functions are added using app.use() and must be called as functions if they return middleware.

2. Step 2: Apply this to cookie-parser

   The correct syntax is app.use(cookieParser()); to invoke the function and add the middleware.

3. Final Answer:

   app.use(cookieParser()); -> Option C

4. Quick Check:

   Middleware added with app.use(cookieParser()) [OK]

Hint: Use parentheses to call middleware function inside app.use [OK]

Common Mistakes:

• Forgetting parentheses after cookieParser
• Calling cookieParser as a method on app
• Passing cookieParser without calling it

3. Given this Express route with cookie-parser middleware, what will be the output if the browser sends a cookie named user with value alice?

app.get('/profile', (req, res) => {
  res.send(`User: ${req.cookies.user}`);
});

medium

A. User: [object Object]

B. User: undefined

C. Error: req.cookies is not defined

D. User: alice

Solution

1. Step 1: Check if cookie-parser is used

   Assuming cookie-parser middleware is active, req.cookies contains parsed cookies.

2. Step 2: Access the user cookie value

   The code accesses req.cookies.user, which equals 'alice' from the browser cookie.

3. Final Answer:

   User: alice -> Option D

4. Quick Check:

   Cookie value accessed correctly = User: alice [OK]

Hint: Access cookie by name on req.cookies object [OK]

Common Mistakes:

• Not using cookie-parser so req.cookies is undefined
• Trying to access cookies as a string
• Assuming cookie names are case-insensitive

4. What is wrong with this Express code snippet if req.cookies is always undefined?

const express = require('express');
const cookieParser = require('cookie-parser');
const app = express();

app.get('/', (req, res) => {
  res.send(req.cookies);
});

app.use(cookieParser());

medium

A. cookie-parser middleware is added after the route, so req.cookies is undefined

B. cookie-parser is not imported correctly

C. The route handler should use res.cookies instead

D. Express does not support cookies natively

Solution

1. Step 1: Check middleware order

   Middleware must be added before routes to affect req objects in those routes.

2. Step 2: Identify the problem in code

   Here, app.use(cookieParser()) is after the route, so req.cookies is not set when the route runs.

3. Final Answer:

   cookie-parser middleware is added after the route, so req.cookies is undefined -> Option A

4. Quick Check:

   Middleware order matters = cookie-parser middleware is added after the route, so req.cookies is undefined [OK]

Hint: Add middleware before routes to access req.cookies [OK]

Common Mistakes:

• Placing middleware after routes
• Confusing req.cookies with res.cookies
• Not calling cookieParser as a function

5. You want to create an Express route that reads a cookie named theme and sends back 'Dark mode' if its value is 'dark', otherwise 'Light mode'. Which code correctly implements this using req.cookies with cookie-parser?

hard

A. app.get('/mode', (req, res) => {
if (req.cookies.theme === 'dark') res.send('Dark mode');
else res.send('Light mode');
});

B. app.get('/mode', (req, res) => {
if (req.cookies['theme'] = 'dark') res.send('Dark mode');
else res.send('Light mode');
});

C. app.get('/mode', (req, res) => {
if (req.cookies.theme == dark) res.send('Dark mode');
else res.send('Light mode');
});

D. app.get('/mode', (req, res) => {
if (req.cookies.theme === dark) res.send('Dark mode');
else res.send('Light mode');
});

Solution

1. Step 1: Check cookie access and comparison

   Use strict equality === to compare req.cookies.theme to the string 'dark'.

2. Step 2: Identify correct syntax

   app.get('/mode', (req, res) => { if (req.cookies.theme === 'dark') res.send('Dark mode'); else res.send('Light mode'); }); uses === and string 'dark' correctly. app.get('/mode', (req, res) => { if (req.cookies['theme'] = 'dark') res.send('Dark mode'); else res.send('Light mode'); }); uses assignment = instead of comparison. app.get('/mode', (req, res) => { if (req.cookies.theme == dark) res.send('Dark mode'); else res.send('Light mode'); }); uses loose equality == with unquoted dark. app.get('/mode', (req, res) => { if (req.cookies.theme === dark) res.send('Dark mode'); else res.send('Light mode'); }); uses undefined variable dark without quotes.

3. Final Answer:

   The code using strict equality req.cookies.theme === 'dark' -> Option A

4. Quick Check:

   Use === 'dark' to compare cookie value [OK]

Hint: Use === and quotes for string comparison with cookie values [OK]

Common Mistakes:

• Using = instead of === for comparison
• Not quoting string literals
• Using loose equality == instead of ===