# Nexus Set Cookie, Http only, same site etc

**URL:** <https://community.sonatype.com/t/nexus-set-cookie-http-only-same-site-etc/11764>\
**Category:** Sonatype Nexus Repository\
**Created:** [December 15, 2023, 2:01am UTC](https://community.sonatype.com/t/nexus-set-cookie-http-only-same-site-etc/11764 "2023-12-15T02:01:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jht\_noworries](https://avatars.discourse-cdn.com/v4/letter/j/b782af/32.png) [@jht\_noworries](https://community.sonatype.com/u/jht_noworries)\
**Post date:** [December 15, 2023, 2:01am UTC](https://community.sonatype.com/t/nexus-set-cookie-http-only-same-site-etc/11764/1 "2023-12-15T02:01:35Z")

</div>

Need help on changing this nexus jetty-https.xml file to this following specifications.

1. Set settings on this specific cookie

e.g.: Set-Cookie: \< cookie-name \>=\< cookie-value \>; secure; HttpOnly; SameSite= ‘Lax’ or ‘Strict’

1. Set settings on this specific cookie with age.

e.g.: Set-Cookie: \< cookie-name \>=\< cookie-value \>; secure; HttpOnly; max-age=9999; SameSite= ‘Lax’ or ‘Strict’.

—Shown below is the current “jetty-https.xml” please let me know for updates on changing this to the specifications required shown above—

---

<div class="post-metadata">

**Author:** ![jht\_noworries](https://avatars.discourse-cdn.com/v4/letter/j/b782af/32.png) [@jht\_noworries](https://community.sonatype.com/u/jht_noworries)\
**Post date:** [December 15, 2023, 2:03am UTC](https://community.sonatype.com/t/nexus-set-cookie-http-only-same-site-etc/11764/2 "2023-12-15T02:03:11Z")

</div>