webapp cookie handling

[vrypan]

I know the subject has come up in other threads, but I haven't found a
clear answer on how to handle cookies under webapp.

I ended up using Cookie.py like this.

Setting a cookie (in this case, named "preview"):
C = Cookie.SmartCookie()
C['preview'] = preview
C['preview']['path']='/'
C['preview']['Max-Age']='2592000'
self.response.headers.add_header('Set-Cookie', C.output(header='') )

and then read it like this:

C = Cookie.SmartCookie()
C.load(self.request.headers.get('Cookie'))
if C.has_key('preview'):
preview = C['preview'].value
else:
preview='0'

It looked OK, but then I noticed some warnings in the console Log that
Cookie.py is insecure and that it is depreceated.

So, what is the right way to handle (multiple) cookies, including
setting path, domain, etc.?

(I know I could use Django, etc, don't point me there. I need to use
webapp for now.)

[Kevin Damm]

The WebOb reference
http://pythonpaste.org/webob/reference.html
mentions cookies in the Request and Response objects (for reading and
writing, respectively).

However, attempting to use the cookie dictionary in self.request or
use the set_cookie function of self.response both fail in a
RequestHandler. So, I would also like to know the recommended way of
using cookies in a webapp-based AppEngine application.

- Kevin

[tj9991]

Here's how I did it. I don't set the path in this, but I'm sure once
you're able to have the cookies sent, you can just use the reference
to see how to properly have a path included.

# Set cookies for auto-fill
cookie = Cookie.SimpleCookie(self.request.headers.get('Cookie'))
cookie['pyib_name'] = self.request.get('name')
if post.email.lower() != 'sage' and post.email.lower() != 'age':
cookie['pyib_email'] = post.email
cookie['pyib_password'] = post.password
self.response.headers['Set-cookie'] = str(cookie)

On May 9, 12:12 am, Kevin Damm <kbd...@gmail.com> wrote:
> The WebOb referencehttp://pythonpaste.org/webob/reference.html

[vrypan]

>     cookie = Cookie.SimpleCookie(self.request.headers.get('Cookie'))

The problem is (as I mentioned in my first post) that AppEngine
creates a depreciation warning about Cookie.py.
(Go to AppEngine Console ->Logs->Warnings)

It works, but it's not the best way :-(

-- panayotis.