Fixed a bug in the new 1.0.0 cookie that doesn't allow legacy imports

controller/pages/api/util/authserver.ts

@@ -34,9 +34,9 @@ import {
 } from "openid-client";
 import { GetServerSidePropsContext, NextApiRequest, NextApiResponse } from "next";
 import { LogLevel, log, logger } from "@fs/ppaas-common";
+import { parse as cookieParse, serialize as cookieSerialize } from "cookie";
 import { formatPageHref, getHostUrl } from "./clientutil";
 import { IncomingMessage } from "http";
-import cookie from "cookie";
 import { createErrorResponse } from "./util";
 import { getClientSecretOpenId } from "./secrets";
 import nextCookie from "next-cookies";
@@ -265,7 +265,7 @@ function getTokenFromQueryOrHeader (req: NextApiRequest, headerName: string = AU
     log("header token: " + JSON.stringify(token), LogLevel.DEBUG);
   }
   if (!token && req.headers.cookie && !Array.isArray(req.headers.cookie)) {
-    const cookies = cookie.parse(req.headers.cookie);
+    const cookies = cookieParse(req.headers.cookie);
     token = cookies[headerName];
     log("cookie token: " + JSON.stringify(token), LogLevel.DEBUG);
   }
@@ -428,15 +428,20 @@ export function setCookies (
   log(`Set cookie to ${token} on ${domain}`, LogLevel.DEBUG);
   // server side
   const oneDay: number = 60 * 60 * 24;
-  const cookies: string[] = [cookie.serialize(AUTH_COOKIE_NAME, token, { domain, path, maxAge: oneDay * COOKIE_DURATION_DAYS })];
-  if (refreshToken) {
-    cookies.push(cookie.serialize(REFRESH_COOKIE_NAME, refreshToken, { domain, path, maxAge: oneDay * REFRESH_COOKIE_DURATION_DAYS }));
-  }
-  if (hintToken) {
-    cookies.push(cookie.serialize(HINT_COOKIE_NAME, hintToken, { domain, path, maxAge: oneDay * COOKIE_DURATION_DAYS }));
+  try {
+    const cookies: string[] = [cookieSerialize(AUTH_COOKIE_NAME, token, { domain, path, maxAge: oneDay * COOKIE_DURATION_DAYS })];
+    if (refreshToken) {
+      cookies.push(cookieSerialize(REFRESH_COOKIE_NAME, refreshToken, { domain, path, maxAge: oneDay * REFRESH_COOKIE_DURATION_DAYS }));
+    }
+    if (hintToken) {
+      cookies.push(cookieSerialize(HINT_COOKIE_NAME, hintToken, { domain, path, maxAge: oneDay * COOKIE_DURATION_DAYS }));
+    }
+    // Set the cookie and then redirect
+    ctx.res.setHeader("Set-Cookie", cookies);
+  } catch (error: unknown) {
+    log("Error setting cookies in header", LogLevel.WARN, error, { token: token !== undefined, refreshToken: refreshToken !== undefined, hintToken: hintToken !== undefined });
+    throw error;
   }
-  // Set the cookie and then redirect
-  ctx.res.setHeader("Set-Cookie", cookies);
 }
 
 function getTokenFromCookieOrHeader (ctx: GetServerSidePropsContext, cookieName: string = AUTH_COOKIE_NAME, headerName?: string): string | undefined {