How to Use Server-side Cookies in JavaScript SDK v3

    type CookieData = {
      name: string;
      value: string;
    };

    type CookiesReqData = {
      options: {
        expires?: Date;
        maxAge?: number;
        path?: string;
        domain?: string;
        sameSite?: 'Lax' | 'Strict' | 'None';
        secure?: boolean;
      };
      cookies: CookieData[];
    };

    type RequestData = CookiesReqData;

    const ALLOWED_COOKIES = [
      'rl_user_id',
      'rl_trait',
      'rl_anonymous_id',
      'rl_group_id',
      'rl_group_trait',
      'rl_page_init_referrer',
      'rl_page_init_referring_domain',
      'rl_session',
      'rl_auth_token'
    ];

    const encode = (value: string) => {
      try {
        return encodeURIComponent(value);
      } catch (err) {
        return undefined;
      }
    };

    const generateCookieStrings = (data: RequestData): string[] => {
      try {
        const { cookies, options } = data;
        return cookies.filter((cookie: CookieData) => ALLOWED_COOKIES.includes(cookie.name)).map((cookie: CookieData) => {
          let cookieStr = `${encode(cookie.name)}=${encode(cookie.value)}`;

          let expires = options.expires;

          // Calculate expires from maxAge if provided
          if (cookie.value === '') {
            expires = new Date(Date.now() - 600 * 1000); // Set to past time to delete cookie
          } else if (options.maxAge) {
            expires = new Date(Date.now() + options.maxAge * 1000);
          }

          if (options.path) cookieStr += `; Path=${options.path}`;
          if (options.domain) cookieStr += `; Domain=${options.domain}`;
          if (expires) cookieStr += `; Expires=${expires.toUTCString()}`;
          if (options.sameSite) cookieStr += `; SameSite=${options.sameSite}`;
          if (options.secure) cookieStr += '; Secure';

          return cookieStr;
        });
      } catch (err) {
        return [];
      }
    };

    export default function cookieRequestHandler (ctx: Context) {
      const requestData: RequestData = ctx.request.body;
      const cookieStrings = generateCookieStrings(requestData);
      cookieStrings.forEach(cookieStr => {
        ctx.response.append('Set-Cookie', cookieStr);
      });
      ctx.status = 200;
    }

    type CookieData = {
      name: string;
      value: string;
    };

    type CookiesReqData = {
      options: {
        expires?: Date;
        maxAge?: number;
        path?: string;
        domain?: string;
        sameSite?: 'Lax' | 'Strict' | 'None';
        secure?: boolean;
      };
      cookies: CookieData[];
    };

    type RequestData = CookiesReqData;

    const ALLOWED_COOKIES = [
      'rl_user_id',
      'rl_trait',
      'rl_anonymous_id',
      'rl_group_id',
      'rl_group_trait',
      'rl_page_init_referrer',
      'rl_page_init_referring_domain',
      'rl_session',
      'rl_auth_token'
    ];

    const encode = (value: string) => {
      try {
        return encodeURIComponent(value);
      } catch (err) {
        return undefined;
      }
    };

    const generateCookieStrings = (data: RequestData): string[] => {
      try {
        const { cookies, options } = data;
        return cookies.filter((cookie: CookieData) => ALLOWED_COOKIES.includes(cookie.name)).map((cookie: CookieData) => {
          let cookieStr = `${encode(cookie.name)}=${encode(cookie.value)}`;

          let expires = options.expires;

          // Calculate expires from maxAge if provided
          if (cookie.value === '') {
            expires = new Date(Date.now() - 600 * 1000); // Set to past time to delete cookie
          } else if (options.maxAge) {
            expires = new Date(Date.now() + options.maxAge * 1000);
          }

          if (options.path) cookieStr += `; Path=${options.path}`;
          if (options.domain) cookieStr += `; Domain=${options.domain}`;
          if (expires) cookieStr += `; Expires=${expires.toUTCString()}`;
          if (options.sameSite) cookieStr += `; SameSite=${options.sameSite}`;
          if (options.secure) cookieStr += '; Secure';

          return cookieStr;
        });
      } catch (err) {
        return [];
      }
    };

    export default function cookieRequestHandler(
      req: NextApiRequest,
      res: NextApiResponse
    ) {
      const requestData: RequestData = req.body;
      const cookieStrings = generateCookieStrings(requestData);
      cookieStrings.forEach(cookieStr => {
        res.append('Set-Cookie', cookieStr);
      });
      res.status(200);
    }

    $allowedCookies = [
        'rl_user_id', 'rl_trait', 'rl_anonymous_id', 'rl_group_id',
        'rl_group_trait', 'rl_page_init_referrer', 'rl_page_init_referring_domain',
        'rl_session', 'rl_auth_token'
    ];

    function isAllowedCookie($name) {
        return in_array($name, $GLOBALS['allowedCookies']);
    }

    function setCookiesFromRequest($data) {
        $cookies = $data['cookies'];
        $options = $data['options'];

        foreach ($cookies as $cookie) {
            if (!isAllowedCookie($cookie['name'])) {
                continue;
            }

            $cookieOptions = []; // Array to hold cookie-specific options
            $maxAge = isset($options['maxAge']) ? $options['maxAge'] : null;

            if ($cookie['value'] === '') {
                $maxAge = -600; // Set negative to ensure cookie is deleted (in seconds)
            }

            $expires = null;
            if (isset($maxAge)) {
                $expires = time() + $maxAge;
            } elseif (isset($options['expires'])) {
                $expires = strtotime($options['expires']);
            }

            // Set each option only if it's explicitly provided
            if (isset($expires)) {
                $cookieOptions['expires'] = $expires;
            }
            if (isset($options['path'])) {
                $cookieOptions['path'] = $options['path'];
            }
            if (isset($options['domain'])) {
                $cookieOptions['domain'] = $options['domain'];
            }
            if (isset($options['secure'])) {
                $cookieOptions['secure'] = $options['secure'];
            }
            if (isset($options['sameSite'])) {
                $cookieOptions['samesite'] = $options['sameSite'];
            }

            setcookie($cookie['name'], $cookie['value'], $cookieOptions);
        }
    }

    function cookieRequestHandler() {
        $jsonData = json_decode(file_get_contents('php://input'), true);
        setCookiesFromRequest($jsonData);
    }

    ALLOWED_COOKIES = [
      'rl_user_id', 'rl_trait', 'rl_anonymous_id', 'rl_group_id',
      'rl_group_trait', 'rl_page_init_referrer', 'rl_page_init_referring_domain',
      'rl_session', 'rl_auth_token'
    ].freeze

    def cookie_request_handler
      data = JSON.parse(request.body.read)
      cookies_data = data['cookies']
      options = data['options'].symbolize_keys

      cookies_data.each do |cookie|
        next unless ALLOWED_COOKIES.include?(cookie['name'])

        value = cookie['value']

        cookie_options = {
          value: value
        }

        # Calculate expires from maxAge if provided
        if value.blank?
          cookie_options[:expires] = 600.seconds.ago # Set to past time to delete cookie
        elsif options[:maxAge]
          cookie_options[:expires] = Time.current + options[:maxAge].seconds
        elsif options[:expires]
          cookie_options[:expires] = options[:expires]
        end

        # Only set optional parameters if they are provided
        cookie_options[:path] = options[:path] if options[:path]
        cookie_options[:domain] = options[:domain] if options[:domain]
        cookie_options[:secure] = options[:secure] if options[:secure]
        cookie_options[:same_site] = options[:sameSite] if options[:sameSite]

        cookies[cookie['name']] = cookie_options
      end
      head :ok
    end

    import (
        "encoding/json"
        "net/http"
        "time"
    )

    var allowedCookies = []string{
        "rl_user_id", "rl_trait", "rl_anonymous_id", "rl_group_id",
        "rl_group_trait", "rl_page_init_referrer", "rl_page_init_referring_domain",
        "rl_session", "rl_auth_token",
    }

    func isAllowedCookie(name string) bool {
        for _, allowed := range allowedCookies {
            if allowed == name {
                return true
            }
        }
        return false
    }

    func parseSameSite(s string) http.SameSite {
        switch s {
        case "Strict":
            return http.SameSiteStrictMode
        case "Lax":
            return http.SameSiteLaxMode
        case "None":
            return http.SameSiteNoneMode
        default:
            return http.SameSiteDefaultMode
        }
    }

    func cookieRequestHandler(w http.ResponseWriter, r *http.Request) {
        var data struct {
            Cookies []struct {
                Name  string `json:"name"`
                Value string `json:"value"`
            } `json:"cookies"`
            Options struct {
                Expires  *time.Time `json:"expires"`
                MaxAge   *int       `json:"maxAge"`
                Path     string     `json:"path"`
                Domain   string     `json:"domain"`
                SameSite string     `json:"sameSite"`
                Secure   bool       `json:"secure"`
            } `json:"options"`
        }
        json.NewDecoder(r.Body).Decode(&data)

        for _, cookie := range data.Cookies {
            if !isAllowedCookie(cookie.Name) {
                continue
            }

            var expires time.Time

            // Calculate expires from maxAge if provided, or use expires if provided
            if cookie.Value == "" {
                expires = time.Now().Add(-600 * time.Second) // Set to past time to delete cookie
            } else if data.Options.MaxAge != nil {
                expires = time.Now().Add(time.Duration(*data.Options.MaxAge) * time.Second)
            } else if data.Options.Expires != nil {
                expires = *data.Options.Expires
            }

            http.SetCookie(w, &http.Cookie{
                Name:     cookie.Name,
                Value:    cookie.Value,
                Expires:  expires,
                Path:     data.Options.Path,
                Domain:   data.Options.Domain,
                Secure:   data.Options.Secure,
                SameSite: parseSameSite(data.Options.SameSite),
            })
        }
        w.WriteHeader(http.StatusOK)
    }