[ library, mit, program, web ] [ Propose Tags ]

WAI middleware to automatically encrypt and sign cookies

[Skip to Readme]
Versions [RSS] [faq],,,,,,
Dependencies base (>=4.7 && <5), bytestring (==0.10.*), cryptonite (>=0.24 && <0.28), http-types (>=0.12.1 && <0.13), memory (>=0.14 && <0.16), random (>=1.1 && <2), split (==0.2.*), wai (>=3.2 && <4) [details]
License MIT
Copyright © حبيب الامين ‪2017
Author Habib Alamin
Maintainer ha.alamin@gmail.com
Category Web
Home page https://github.com/habibalamin/wai-secure-cookies
Uploaded by alaminium at 2021-03-03T10:46:03Z
Distributions NixOS:
Executables waicookie-genkey
Downloads 2345 total (4 in the last 30 days)
Rating (no votes yet) [estimated by Bayesian average]
Your Rating
  • λ
  • λ
  • λ
Status Hackage Matrix CI
Docs available [build log]
Last success reported on 2021-03-03 [all 1 reports]


[Index] [Quick Jump]


Maintainer's Corner

For package maintainers and hackage trustees


Readme for wai-secure-cookies-

[back to package description]


I extracted a WAI middleware to automatically encrypt and sign cookies.


I am not a cryptographer, and the crypto libraries in Haskell are not nearly as easy to use as what I'm used to in Ruby, so I wouldn't depend on this for a serious project until it's had some proper eyes on it.


Populate the following environment variables in your WAI application process:

WAI_COOKIE_VALIDATION_KEY # key to sign cookie names and values
WAI_COOKIE_ENCRYPTION_KEY # key to encrypt cookie names and values

You can generate random keys with waicookie-genkey:

waicookie-genkey <key type> ...
key types: encryption