Function: createSetTokenHandler()

createSetTokenHandler(overrides?): (request) => Promise<Response>

Create a POST handler that sets the auth token in an httpOnly cookie.

Security: origin validation, Content-Type check, CSRF (SameSite=Lax), httpOnly (XSS protection), Secure in production.

Pass isTrustedOrigin when running behind a reverse proxy that strips or rewrites the Host header — see trustedForwardedHostValidator.

Parameters

overrides?

SetTokenHandlerOptions

Returns

(request) => Promise<Response>