How do I obtain the header value of SignedCookieJar?

[PuercoPop]

Summary

While writing tests against endpoints that need authentication I need to add a cookie header with the session id. Is there a way to obtain the header value from a cookie jar?

let jar = SignedCookieCookieJar::new();
// let session_id = "...";
// jar.add(Cookie::new("sid", session_id));
// ...    
let req = Request::builder()
    .method("GET")
    .uri("/admin")
    .header("Cookie", jar...)
    .unwrap();
let res = app.oneshot(req).await.unwrap();

axum version

axum: 0.8.1, axum-extra: 0.10.0

[For8stt]

I’d generate the signed cookie via SignedCookieJar, convert it into a response, then take the Set-Cookie header and use the name=value part as the request Cookie header.

Something like:

use axum::{
    body::Body,
    http::{header, Request},
    response::IntoResponse,
};
use axum_extra::extract::cookie::{Cookie, Key, SignedCookieJar};
use tower::ServiceExt;

let key = Key::generate();
let session_id = "...";

let jar = SignedCookieJar::new(key.clone())
    .add(Cookie::new("sid", session_id.to_owned()));

let res = jar.into_response();

let cookie_header = res
    .headers()
    .get(header::SET_COOKIE)
    .unwrap()
    .to_str()
    .unwrap()
    .split(';')
    .next()
    .unwrap()
    .to_owned();

let req = Request::builder()
    .method("GET")
    .uri("/admin")
    .header(header::COOKIE, cookie_header)
    .body(Body::empty())
    .unwrap();

let res = app.oneshot(req).await.unwrap();

Small detail: for the request you want Cookie, not Set-Cookie.

Also make sure the test app/router uses the same Key, otherwise the signed cookie won’t verify.

Docs: SignedCookieJar::add signs the cookie, and the jar has to be returned / converted into a response for the header to be produced.
https://docs.rs/axum-extra/latest/axum_extra/extract/cookie/struct.SignedCookieJar.html

lmk if there’s a cleaner helper for this, but this works fine for tests imo 🙂

[PuercoPop]

Thanks I didn't know the jar could be turned into a response. My interim solution was to make a request to the sign-in endpoint and extract the cookie from the response. This is more straight forward, will update the code. My cookie extraction code is a little simpler because I'm counting on that that there is only one cookie in the year.

let set_cookie_header = res.headers().get("set-cookie").unwrap();
    let sid = set_cookie_header.to_str()?.split('=').nth(1).unwrap();