req.cookies with cookie-parser in Express - Step-by-Step Execution

Concept Flow - req.cookies with cookie-parser

Client sends HTTP request with cookies

↓

Express server receives request

↓

cookie-parser middleware runs

↓

Parse cookies from request headers

↓

Attach parsed cookies to req.cookies

↓

Route handler accesses req.cookies

↓

Respond based on cookie values

This flow shows how Express uses cookie-parser middleware to read cookies from incoming requests and makes them available as req.cookies for route handlers.

Execution Sample

Express

const express = require('express');
const cookieParser = require('cookie-parser');
const app = express();
app.use(cookieParser());
app.get('/', (req, res) => {
  res.send(req.cookies);
});

This code sets up an Express server that uses cookie-parser to read cookies and sends them back in the response.

Execution Table

Step	Action	Request Headers	req.cookies	Response Sent
1	Client sends request with header 'Cookie: user=alice; theme=dark'	Cookie: user=alice; theme=dark	{}	N/A
2	Express receives request	Cookie: user=alice; theme=dark	{}	N/A
3	cookie-parser middleware parses cookies	Cookie: user=alice; theme=dark	{"user":"alice","theme":"dark"}	N/A
4	Route handler reads req.cookies	Cookie: user=alice; theme=dark	{"user":"alice","theme":"dark"}	N/A
5	Route handler sends req.cookies as response	Cookie: user=alice; theme=dark	{"user":"alice","theme":"dark"}	{"user":"alice","theme":"dark"}
6	Request handling complete	Cookie: user=alice; theme=dark	{"user":"alice","theme":"dark"}	Response sent with cookies object

💡 Request handled and response sent with parsed cookies from client

Variable Tracker

Variable	Start	After Step 3	After Step 4	Final
req.cookies	{}	{"user":"alice","theme":"dark"}	{"user":"alice","theme":"dark"}	{"user":"alice","theme":"dark"}

Key Moments - 2 Insights

Why is req.cookies empty before cookie-parser runs?

Because Express does not parse cookies by default. cookie-parser middleware reads the Cookie header and fills req.cookies, as shown in step 3 of the execution_table.

What happens if the client sends no cookies?

req.cookies will be an empty object {}, since cookie-parser finds no cookies to parse. This is implied by the initial empty state in the variable_tracker.

Visual Quiz - 3 Questions

Look at the execution_table at step 3, what does req.cookies contain?

A {}

B {"user":"alice","theme":"dark"}

C undefined

D null

💡 Hint

Check the req.cookies column at step 3 in the execution_table

At which step does the route handler send the response?

A Step 2

B Step 4

C Step 5

D Step 6

💡 Hint

Look at the Response Sent column in the execution_table

If the client sends no Cookie header, how would req.cookies look after middleware?

A An empty object {}

B null

C undefined

D An error is thrown

💡 Hint

Refer to the key_moments explanation about no cookies sent

Concept Snapshot

Use cookie-parser middleware in Express to parse cookies from incoming requests.
Add cookie-parser with app.use(cookieParser()).
Access cookies via req.cookies as an object.
If no cookies sent, req.cookies is {}.
Cookies come from the HTTP Cookie header.
Route handlers can read req.cookies to customize responses.

Full Transcript

When a client sends an HTTP request with cookies, Express receives it. The cookie-parser middleware runs first, reading the Cookie header from the request. It parses the cookies into a JavaScript object and attaches it to req.cookies. Then, route handlers can access req.cookies to read cookie values. If no cookies are sent, req.cookies is an empty object. Finally, the route handler can send a response using the cookie data. This process allows easy access to cookies in Express apps.

Practice

1. What does req.cookies represent in an Express app when using cookie-parser middleware?

easy

A. A function to set cookies on the response

B. An object containing cookies sent by the browser

C. A string of all cookies concatenated

D. An array of cookie names only

Solution

1. Step 1: Understand the role of cookie-parser

   The cookie-parser middleware parses cookies from the HTTP request headers.

2. Step 2: Identify what req.cookies holds

   After parsing, req.cookies is an object where each cookie name is a key and its value is the cookie's value.

3. Final Answer:

   An object containing cookies sent by the browser -> Option B

4. Quick Check:

   req.cookies = object of cookies [OK]

Hint: Remember: req.cookies is an object, not a string or function [OK]

Common Mistakes:

• Thinking req.cookies is a function
• Expecting req.cookies to be a string
• Confusing req.cookies with response cookies

2. Which of the following is the correct way to use cookie-parser middleware in an Express app?

easy

A. app.use(cookieParser);

B. app.cookieParser();

C. app.use(cookieParser());

D. ;)(resraPeikooc.ppa

Solution

1. Step 1: Recall middleware usage in Express

   Middleware functions are added using app.use() and must be called as functions if they return middleware.

2. Step 2: Apply this to cookie-parser

   The correct syntax is app.use(cookieParser()); to invoke the function and add the middleware.

3. Final Answer:

   app.use(cookieParser()); -> Option C

4. Quick Check:

   Middleware added with app.use(cookieParser()) [OK]

Hint: Use parentheses to call middleware function inside app.use [OK]

Common Mistakes:

• Forgetting parentheses after cookieParser
• Calling cookieParser as a method on app
• Passing cookieParser without calling it

3. Given this Express route with cookie-parser middleware, what will be the output if the browser sends a cookie named user with value alice?

app.get('/profile', (req, res) => {
  res.send(`User: ${req.cookies.user}`);
});

medium

A. User: [object Object]

B. User: undefined

C. Error: req.cookies is not defined

D. User: alice

Solution

1. Step 1: Check if cookie-parser is used

   Assuming cookie-parser middleware is active, req.cookies contains parsed cookies.

2. Step 2: Access the user cookie value

   The code accesses req.cookies.user, which equals 'alice' from the browser cookie.

3. Final Answer:

   User: alice -> Option D

4. Quick Check:

   Cookie value accessed correctly = User: alice [OK]

Hint: Access cookie by name on req.cookies object [OK]

Common Mistakes:

• Not using cookie-parser so req.cookies is undefined
• Trying to access cookies as a string
• Assuming cookie names are case-insensitive

4. What is wrong with this Express code snippet if req.cookies is always undefined?

const express = require('express');
const cookieParser = require('cookie-parser');
const app = express();

app.get('/', (req, res) => {
  res.send(req.cookies);
});

app.use(cookieParser());

medium

A. cookie-parser middleware is added after the route, so req.cookies is undefined

B. cookie-parser is not imported correctly

C. The route handler should use res.cookies instead

D. Express does not support cookies natively

Solution

1. Step 1: Check middleware order

   Middleware must be added before routes to affect req objects in those routes.

2. Step 2: Identify the problem in code

   Here, app.use(cookieParser()) is after the route, so req.cookies is not set when the route runs.

3. Final Answer:

   cookie-parser middleware is added after the route, so req.cookies is undefined -> Option A

4. Quick Check:

   Middleware order matters = cookie-parser middleware is added after the route, so req.cookies is undefined [OK]

Hint: Add middleware before routes to access req.cookies [OK]

Common Mistakes:

• Placing middleware after routes
• Confusing req.cookies with res.cookies
• Not calling cookieParser as a function

5. You want to create an Express route that reads a cookie named theme and sends back 'Dark mode' if its value is 'dark', otherwise 'Light mode'. Which code correctly implements this using req.cookies with cookie-parser?

hard

A. app.get('/mode', (req, res) => {
if (req.cookies.theme === 'dark') res.send('Dark mode');
else res.send('Light mode');
});

B. app.get('/mode', (req, res) => {
if (req.cookies['theme'] = 'dark') res.send('Dark mode');
else res.send('Light mode');
});

C. app.get('/mode', (req, res) => {
if (req.cookies.theme == dark) res.send('Dark mode');
else res.send('Light mode');
});

D. app.get('/mode', (req, res) => {
if (req.cookies.theme === dark) res.send('Dark mode');
else res.send('Light mode');
});

Solution

1. Step 1: Check cookie access and comparison

   Use strict equality === to compare req.cookies.theme to the string 'dark'.

2. Step 2: Identify correct syntax

   app.get('/mode', (req, res) => { if (req.cookies.theme === 'dark') res.send('Dark mode'); else res.send('Light mode'); }); uses === and string 'dark' correctly. app.get('/mode', (req, res) => { if (req.cookies['theme'] = 'dark') res.send('Dark mode'); else res.send('Light mode'); }); uses assignment = instead of comparison. app.get('/mode', (req, res) => { if (req.cookies.theme == dark) res.send('Dark mode'); else res.send('Light mode'); }); uses loose equality == with unquoted dark. app.get('/mode', (req, res) => { if (req.cookies.theme === dark) res.send('Dark mode'); else res.send('Light mode'); }); uses undefined variable dark without quotes.

3. Final Answer:

   The code using strict equality req.cookies.theme === 'dark' -> Option A

4. Quick Check:

   Use === 'dark' to compare cookie value [OK]

Hint: Use === and quotes for string comparison with cookie values [OK]

Common Mistakes:

• Using = instead of === for comparison
• Not quoting string literals
• Using loose equality == instead of ===