Can we create a signed cookies for different ressources path ?

Question

Hi,

I want to know if it's possible to create signed cookies on different resources on aws cloudfront?
for example: I want to authorize the path https://example.com/path1/* and the https://example.com/path2/*.

I use the create a function in php, and replace the ressoureKey by https://example.com/path1/* but, is it possible to add https://example.com/path2/*?

Thanks.

![Enter image description here](/media/postImages/original/IMjJLSdV1YTmCo9kaHpKm1BQ)

Accepted Answer

I assume you are using PHP to send cookie to viewer. When you sent the set-cookie response header, you can specify the path it applies to

From [PHP set-cookie](https://www.php.net/manual/en/function.setcookie.php)
> path
>
> The path on the server in which the cookie will be available on. If set to '/', the cookie will be available within the entire domain. 
If set to '/foo/', the cookie will only be available within the /foo/ directory and all sub-directories such as /foo/bar/ of domain. 
The default value is the current directory that the cookie is being set in.

So you will generate 2 signed cookies and set it accordingly.
```
 time() + 60*60*24*30, 
                'path' => '/path1/', 
                'domain' => '.example.com', // leading dot for compatibility or use subdomain
                'secure' => true,     // or false
                'httponly' => true,    // or false
                'samesite' => 'None' // None || Lax  || Strict
                );
setcookie('CloudFront-Expires', 'SignedCookie Value1', $arr_cookie_options1);

$arr_cookie_options2 = array (
                'expires' => time() + 60*60*24*30, 
                'path' => '/path2/', 
                'domain' => '.example.com', // leading dot for compatibility or use subdomain
                'secure' => true,     // or false
                'httponly' => true,    // or false
                'samesite' => 'None' // None || Lax  || Strict
                );
setcookie('CloudFront-Expires',  'SignedCookierValue2', $arr_cookie_options2);   
?>
```
Will need it to test though

Can we create a signed cookies for different ressources path ?

相关内容