NaN
Im using an ETS table to store sessions. The Cookie is not used to when accessing the ETS table. How do I prevent the set-cookie header from being sent?
This has no effect:
defmodule Session.RemCookies do
import Plug.Conn
def init(opts), do: opts
def call(conn, _opts) do
register_before_send(conn, fn conn ->
# Remove all Set-Cookie headers from response
%{conn | resp_headers: Enum.reject(conn.resp_headers, fn {key, _} ->
String.downcase(key) == "set-cookie"
end)}
end)
end
end
Where Next?
Trending in Questions
Other Trending Topics
Latest Phoenix Threads
Latest on Elixir Forum
Sponsor Spotlight
Bringing learning, work and compliance together since 1987.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixirconf-us
- #ai
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #hex
- #security
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Master modern tools, write cleaner code, and tackle real-world challenges.
Producing high quality Elixir screencasts since 2017.
**Building the future of software with AI, trust, and human connection.**
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 9- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
derek-zhou
Even if you have the session stored in ETS, you still need to store the session key as a cookie. Otherwise, how does your application tell which session to use for incoming request?
NaN
Passed as a query param. Like I said, its not used. Its spec for a reason. Cookie cannot be used.
derek-zhou
While what you described might be theoretically possible, I don’t think it is supported by
Plug.Session. The relevant code is here:https://github.com/elixir-plug/plug/blob/587f365b8e5fed8329755028154b2e582120365a/lib/plug/session.ex#L72
It looks for a cookie.
NaN
Im not using a cookie because its a distributed service and uses cross site access for different elements on the page… the cookie is ignored.
derek-zhou
If you are set on your way, I suggest you to write your own version of Plug.Session instead of twisting its arm. Plug.Session is only ~100 LOC.
You’d need to pass this query param for every single internal links, and heaven forbid if one of your user share a link.
NaN
How would you approach otherwise?
lud
Can you use a different header?
dimitarvp
If you have a common host and the services are all subdomains then a wildcard cookie could do the trick and circumvent the problem you mentioned above.
Or use JWT.
derek-zhou
I do not understand your constraint, so please take the following with a grain of salt.
You can store a security token in local storage and use it as sorta API key in a custom header. 2 downsides: