set-cookie標頭未由javascript返回

Question

我正在調用客戶端提供的RESTful Web服務。 使用CocoaRestClient（我在Mac上），可以看到返回了多個Set-Cookie標頭。 但是，當我嘗試在應用程序的響應標頭中檢索這些cookie（使用PhoneGap）時，標頭中僅返回最后一個set-cookie值。

CocoaRestClient顯示以下返回的cookie：

Set-Cookie: SMSESSION=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; path=/; domain=.abc.com; secure, ActiveResponse=""; path=/; domain=.abc.com; secure, SMIDENTITY=""; path=/; domain=.abc.com; secure, blueboxvalues=""; path=/; domain=.abc.com; secure, BHAROSA_TARGET5=""; path=/; domain=.abc.com; secure, BHAROSA_TARGET=""; path=/; domain=.abc.com; secure, sm_universalid=e0494209bb9a934c29e70fe09a1cc67Z; path=/; domain=.abc.com; secure, BHAROSA_APP_NAME=""; path=/; domain=.abc.com; secure, subscribed_services=SSOService^175; path=/; domain=.abc.com; secure, bharosaenrolled=""; path=/; domain=.abc.com; secure, AUTHRESPONSE=""; path=/; domain=.abc.com; secure

當像這樣使用jQuery發布時：

        var response = $.post(loginUrl, parameters, authenticateSuccess);

        function authenticateSuccess(html, textStatus, data) {
          alert("in authenticateSuccess()");
          console.log("headers: " + data.getAllResponseHeaders());
        }

將顯示以下日志信息（請注意單個set-cookie行）：

headers: date: Mon, 03 Jun 2013 14:27:28 GMT
    content-encoding: gzip
    x-mod-pagespeed: 1.0.22.7-2005
    content-length: 9372
    pragma: no-cache
    server: Apache
    vary: Accept-Encoding
    content-type: text/html
    cache-control: max-age=0, no-store, no-cache, must-revalidate
    set-cookie: AUTHRESPONSE=""; path=/; domain=.abc.com; secure
    accept-ranges: bytes     

我也嘗試過使用ajax發布和XMLHttpRequest。 所有人都做同樣的事情。

那么，為什么僅在標頭中檢索到最后一個Set-cookie標頭？

顯然有人問過這個問題，但在這里從未回答過： 如何從Android的jquery getResponseHeader（'Set-Cookie'）獲取兩個cookie

先感謝您。

Answer 1

XMLHttpRequest API的當前標准化狀態僅限制對Set-Cookie和Set-Cookie2標頭字段的訪問：

client.getAllResponseHeaders（）

返回響應中的所有標頭，但字段名稱為Set-Cookie或Set-Cookie2的標頭除外。