DeleteCookies

Deletes one or more cookies by name, emitting an expired Set-Cookie for each. The expiry is scoped to the root path and the current host, so a cookie written with a different path or domain is a different cookie to the browser and survives this call.

Usage

using Microsoft.AspNetCore.Mvc;
using AlmightyShogun.AspNet.Core;

[ApiController]
[Route("sessions")]
public sealed class SessionsController : ControllerBase
{
    [HttpDelete]
    public IActionResult SignOut()
    {
        Response.DeleteCookies("access_token", "refresh_token");

        return NoContent();
    }
}

Parameters

cookieNames: string[]
Names of the cookies to delete. Blank and whitespace-only names are skipped, so a name read from configuration can be passed without a guard.

Type signature

public void DeleteCookies(params string[] cookieNames);