question How to get/set cookies for REST API in Developer forum

How to get/set cookies for REST API

simonezini — Thu, 21 Jan 2021 17:15:53 GMT

Hi all,

I'm trying to call a REST API and it needs two different step: the first one to get an access token, the second one to do the REST call.

I'm able to do the first one, in fact I'm getting the access token correctly.

The problems come with the second one, because I need to get cookies and token from the first call and pass them to the 2nd.

I'm able to pass the access token in header with setRequestHeader(string Name, string Value), but I can't reach to correctly set cookies in the 2nd REST call. Here the code used for the 2nd call:

//"token" contains token from the first call

var r = new sn_ws.RESTMessageV2('Create user', 'POST');
var body = '';
r.setRequestHeader('X-CSRF-Token', token.toString());

/***** BODY START *****/
body += '{\n';
body += '......';
body += '}\n';
/***** BODY END *****/

r.setRequestBody(body);
var response = r.execute();
var responseBody = response.getBody();
var httpStatus = response.getStatusCode();

However I don't know how to use setCookies() or a similar function to correctly pass the cookies when doing POST REST call.

Could please anyone help me?

Thanks!

Simone

Re: How to get/set cookies for REST API

howardaustin — Wed, 17 Feb 2021 17:30:23 GMT

Hey simonezini,

I am facing a similar challenge. Maybe if we pool our experience, we can find the solution. Based on your notes, it sounds like you are familiar with response.getCookies(); to pull out the cookies from the first call. You can also use response.getHeader('Set-Cookie'); which gives the cookies in a slightly different format.

For the second call, I have used:

 r.setRequestHeader('Cookie',cookie);

This mimics my Postman layout, but does not appear to be received by the Endpoint. At the end of the day, a cookie is simply a custom Header to pass across. I believe the Host isn't aligned for the cookie to validate, or I have entered some value wrong.

Alternatively, you could add a variable and pass it in. Let me know if it works better for you:

r.setStringParameterNoEscape('cookie',cookie);

Edit: I figured it out!!!!!!!!!!!

// Original header
var r = new sn_ws.RESTMessageV2('Create user', 'POST');
var body = '';
r.setRequestHeader('X-CSRF-Token', token.toString());
// Adding in the cookies
var cookies = response.getCookies(); // This is the response from the GET token call.
var cookieResponse = processCookies(cookies);  // This is how you transform the cookie to the right format.
r.setRequestHeader("Cookie",cookieResponse); // This is how you add the cookies to the POST.

function processCookies(cookiesSource){
   // The response is neither an array or a string, so I bullied it into an array.
   var cookies = cookiesSource.toString();
   cookies = cookies.replace("[", "");
   cookies = cookies.replace("]","");
   var arrayCookie = cookies.split(',');
   
   var response = ""; 
   for (var i = 0; i<arrayCookie.length; i++){
      //for each cookie provided, you need to parse it down to "JSESSIONID=EB233D63974F.........3DE1ECD1F02;" and combine it
      var start = cookie.split(';');
      response += start[0] + ";";
   }
   gs.info("Response from arrayCookie: "+ response);
   return response;
}

Hope this helps!

Re: How to get/set cookies for REST API

Sowmya Chinnara — Tue, 18 May 2021 07:00:34 GMT

Hi,

I am not getting even the access token(token in your code).My requirement is the same of yours.Can i get your 1st code which is used to get the x-csrf token.if resolved can i get the second code.i tried a lot to figure it out but couldn't.

Thanks,

Sowmya

Re: How to get/set cookies for REST API

simonezini — Tue, 18 May 2021 15:53:59 GMT

Hi all,

in the end we manage to remove the access token from the third-party application and chanage auth type for the 2nd call (without an access token).

Thanks for your replies

Re: How to get/set cookies for REST API

simonezini — Tue, 18 May 2021 15:57:54 GMT

Hi,

here's the code I've used to get the first access token (X-CSRF-TOKEN):

var token = '';
try{
	var r = new sn_ws.RESTMessageV2('TEST - Token', 'GET');
	
	var response = r.execute();
	var responseBody = response.getBody();
	var httpStatus = response.getStatusCode();
	gs.log("REST Call - StatusCode: " + httpStatus );
	gs.log("REST Call - ResponseBody : " + responseBody);
	
	if(httpStatus == 200 || httpStatus == 201){
		token = response.getHeader("X-CSRF-Token");
		gs.log("REST Call - Token : " + token);
	}
} catch(ex) {
	var message = ex.getMessage();
}

Re: How to get/set cookies for REST API

loicthery — Tue, 14 Oct 2025 08:39:38 GMT

Hi guys,

In the code sample above, the array is produced using string replacement and split.

// The response is neither an array or a string, so I bullied it into an array. var cookies = cookiesSource.toString(); cookies = cookies.replace("[", ""); cookies = cookies.replace("]",""); var arrayCookie = cookies.split(',');

In fact, the method RESTMessageV2.getCookies() returns an java ArrayList.

The best way to proceed is to use the native Java iterator, more reliable:

// The response is a native Java ArrayList, so you can prefer to build an Javascript Array var iterator = cookiesSource.iterator(); var arrayCookie = []; while (iterator.hasNext()) { arrayCookie.push(iterator.next()); }

I hope it can help.

Thank you for the reply, it was very useful for me too!

Regards,

Loïc