python在SimpleCookie中保存jwt令牌

Question

My goal is to create a cookie that stores the jwt`s id token and pass it back to the client side. This logic is running in an aws lambda :

def lambda_handler(event, context):
.....
.....
cookie_name="my_cookie"
cookie = gen_cookie(domain, expiration, cookie_name,jwt):
return {"statusCode": 302,
        "headers": {
            "Location": "different-url/logged-in",
            "Set-Cookie": cookie}
        }

def gen_cookie(domain, expiration, cookie_name,jwt):
    cookie = SimpleCookie()
    cookie[cookie_name] = "test"
    cookie[cookie_name]['httponly'] = "yes"
    cookie[cookie_name]['domain'] = domain
    cookie[cookie_name]['expires'] = expiration
    cookie[cookie_name]['path'] = "/"
    cookie[cookie_name]['id_token'] = jwt['id_token']
    print(cookie)
    return cookie

I'm getting an exception that the id_token isnt a valid attribute.

[ERROR] CookieError: Invalid attribute 'id_token'
Traceback (most recent call last):
  File "/var/task/lambda_function.py", line 41, in lambda_handler
    cookie[cookie_name]['id_token'] = response_content_dict['id_token']
  File "/var/lang/lib/python3.7/http/cookies.py", line 311, in __setitem__
    raise CookieError("Invalid attribute %r" % (K,))

I checked and the only valid values in the simpleCookie are :

  _reserved = {
        "expires"  : "expires",
        "path"     : "Path",
        "comment"  : "Comment",
        "domain"   : "Domain",
        "max-age"  : "Max-Age",
        "secure"   : "Secure",
        "httponly" : "HttpOnly",
        "version"  : "Version",
    }

So my question is, how can I create a cookie that contains the jwt and return it to the client side ?

Answer 1

I saved the jwt in the cookie in the following way :

def gen_cookie(domain, expiration, cookie_name,jwt):
    cookie = SimpleCookie()
    cookie[cookie_name] = jwt['id_token']
    cookie[cookie_name]['httponly'] = "yes"
    cookie[cookie_name]['domain'] = domain
    cookie[cookie_name]['expires'] = expiration
    cookie[cookie_name]['path'] = "/"
    print(cookie)
    return cookie

Notice that the value of the cookie is the jwt`s token.