# Secure HTTP cookies

**URL:** <https://discourse.nodered.org/t/secure-http-cookies/11046>\
**Category:** Feature Requests\
**Created:** [12 May 2019 18:30 UTC](https://discourse.nodered.org/t/secure-http-cookies/11046 "2019-05-12T18:30:38Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![oliv3](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/oliv3/32/7193_2.png) [@oliv3](https://discourse.nodered.org/u/oliv3)\
**Post date:** [12 May 2019 18:30 UTC](https://discourse.nodered.org/t/secure-http-cookies/11046/1 "2019-05-12T18:30:38Z")

</div>

Hi, in the HTTP response node, I can't find a way to set cookies as "Secure" and/or "HttpOnly".  
Are there any plans to handle this ? Thanks !

---

<div class="post-metadata">

**Author:** ![narongk](https://avatars.discourse-cdn.com/v4/letter/n/f04885/32.png) [@narongk](https://discourse.nodered.org/u/narongk)\
**Post date:** [2 August 2019 07:04 UTC](https://discourse.nodered.org/t/secure-http-cookies/11046/2 "2019-08-02T07:04:03Z")

</div>

msg.res.\_res.cookie('access\_token',msg.token,{maxAge:maxAge,httpOnly: true ,secure:true});  
it's work