Sets one cookie with explicit attributes

GEThttps://api.testingapis.com/api/cookies/set/{name}/{value}Sign in to see this endpoint's URL

The response includes the exact Set-Cookie header, plus a warning when SameSite=None is used without Secure.

Parameters 7

Name	Type	Description
`name`required	path · string	Cookie name: an RFC 6265 token, 1-64 characters.
`value`required	path · string	Cookie value, at most 256 characters.
`httpOnly`	query · boolean	Adds HttpOnly. Default false. Default: false.
`secure`	query · boolean	Adds Secure. Default false. Default: false.
`sameSite`	query · string	lax, strict, none or unspecified (default, attribute omitted).
`maxAge`	query · integer (int32)	Lifetime in seconds, clamped to 0-31536000. Omit for a session cookie; 0 expires it immediately.
`path`	query · string	Cookie path. Must start with /, at most 128 characters, no ;. Default /. Default: "/".

Responses

200: The cookie and its attributes.
400: Invalid name, value, path or sameSite.

Example

Request

curl -X GET "https://api.testingapis.com/api/cookies/set/theme/dark" \
  -H "X-TestingApis-Key: YOUR_API_KEY"

Response200 OK

Set-Cookie: theme=dark; path=/

{
  "message": "Cookie 'theme' set",
  "cookie": {
    "name": "theme",
    "value": "dark",
    "path": "/",
    "httpOnly": false,
    "secure": false,
    "sameSite": "unspecified",
    "maxAge": null
  },
  "setCookieHeader": "theme=dark; path=/",
  "warning": null
}

The parameters, request and response examples and the live Try it panel for this endpoint are for signed-in members. Accounts are free and take a few seconds to create.

Try itSign-in requiredUses your key

api.testingapis.com

curl 'https://api.testingapis.com/api/cookies/set/theme/dark' \
  -H 'X-TestingApis-Key: YOUR_API_KEY'

const res = await fetch("https://api.testingapis.com/api/cookies/set/theme/dark", {
  headers: {
    "X-TestingApis-Key": "YOUR_API_KEY",
  },
});
console.log(res.status, await res.text());

// The shape of the example response in the docs.
type ApiResponse = {
  message: string;
  cookie: {
    name: string;
    value: string;
    path: string;
    httpOnly: boolean;
    secure: boolean;
    sameSite: string;
    maxAge: null;
  };
  setCookieHeader: string;
  warning: null;
};

const res = await fetch("https://api.testingapis.com/api/cookies/set/theme/dark", {
  headers: {
    "X-TestingApis-Key": "YOUR_API_KEY",
  },
});
const body = (await res.json()) as ApiResponse;
console.log(res.status, body);

import requests

res = requests.get(
    "https://api.testingapis.com/api/cookies/set/theme/dark",
    headers={
        "X-TestingApis-Key": "YOUR_API_KEY",
    },
)
print(res.status_code, res.text)

using var client = new HttpClient();
using var request = new HttpRequestMessage(HttpMethod.Get, "https://api.testingapis.com/api/cookies/set/theme/dark");
request.Headers.TryAddWithoutValidation("X-TestingApis-Key", "YOUR_API_KEY");
using var response = await client.SendAsync(request);
Console.WriteLine($"{(int)response.StatusCode} {await response.Content.ReadAsStringAsync()}");

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpClient client = HttpClient.newHttpClient();
        HttpRequest request = HttpRequest.newBuilder(URI.create("https://api.testingapis.com/api/cookies/set/theme/dark"))
                .header("X-TestingApis-Key", "YOUR_API_KEY")
                .GET()
                .build();
        HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
        System.out.println(response.statusCode() + " " + response.body());
    }
}

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.testingapis.com/api/cookies/set/theme/dark", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("X-TestingApis-Key", "YOUR_API_KEY")
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()
	data, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(res.StatusCode, string(data))
}

GEThttps://api.testingapis.com/api/cookies/set/theme/dark

Path

namerequiredstringvaluerequiredstring

Query

httpOnlyboolean

secureboolean

sameSitestring

maxAgeinteger (int32)

pathstring

Headers

Browsers do not send cookies to another site, so endpoints that read cookies will not see them from this page. The curl example works.