如何在查看者響應中刪除 Cloudfront 標頭（Set-Cookie）

Question

我想從 Cloudfront 響應中刪除“ASP.NET_SessionId”Set-Cookie 標頭。

set-cookie: lang=en;
set-cookie: lang-favorite=en;path=/
set-cookie: gxplang=E;
set-cookie: ASP.NET_SessionId=sdfdsf

Answer 1

將 Lambda @Edge 函數添加到 Cloudfront 的查看器響應行為：

'use strict';

const discardHeader = 'ASP.NET_SessionId=';

exports.handler = (event, context, callback) => {
    const response = event.Records[0].cf.response;
    const setCookieHeaders = response.headers['set-cookie'];

    if(setCookieHeaders && setCookieHeaders.length > 0)
    {
        response.headers['set-cookie'] = setCookieHeaders.filter( h => h.value.indexOf(discardHeader) < 0 );
    }      
    return callback(null, response);    
};