如何在查看者响应中删除 Cloudfront 标头（Set-Cookie）

Question

我想从 Cloudfront 响应中删除“ASP.NET_SessionId”Set-Cookie 标头。

set-cookie: lang=en;
set-cookie: lang-favorite=en;path=/
set-cookie: gxplang=E;
set-cookie: ASP.NET_SessionId=sdfdsf

Answer 1

将 Lambda @Edge 函数添加到 Cloudfront 的查看器响应行为：

'use strict';

const discardHeader = 'ASP.NET_SessionId=';

exports.handler = (event, context, callback) => {
    const response = event.Records[0].cf.response;
    const setCookieHeaders = response.headers['set-cookie'];

    if(setCookieHeaders && setCookieHeaders.length > 0)
    {
        response.headers['set-cookie'] = setCookieHeaders.filter( h => h.value.indexOf(discardHeader) < 0 );
    }      
    return callback(null, response);    
};