Django — Cookies

Setting Cookies

def my_view(request):
    response = HttpResponse("Hello")
    response.set_cookie('username', 'john', max_age=3600)
    return response

Reading Cookies

def my_view(request):
    username = request.COOKIES.get('username', 'Guest')
    return HttpResponse(f"Hello, {username}")

Deleting Cookies

def my_view(request):
    response = HttpResponse("Cookie deleted")
    response.delete_cookie('username')
    return response

Cookie Options

Option	Description
max_age	Seconds until expiry
expires	Date/time of expiry
path	Cookie path
domain	Cookie domain
secure	HTTPS only
httponly	JavaScript inaccessible

Signed Cookies

# settings.py
SECRET_KEY = 'your-secret-key'

# Setting signed cookie
response.set_signed_cookie('username', 'john', salt='username')

# Reading signed cookie
username = request.get_signed_cookie('username', salt='username')

Mini Practice

1. Set and read cookies
2. Set cookie with expiry
3. Delete a cookie
4. Use signed cookies for security

Up Next

Continue with Messages — displaying messages to users.