Layer 7 API Gateway: How to delete persistent cookies

Products

• CA API Gateway

Issue/Introduction

This article describes how cookies can be deleted via the Gateway 'Manage Cookie' assertion.

Environment

Release: All supported versions
Component:  API Gateway

Resolution

In our example, we would like to remove a cookie named userID in the domain example.com . Cookies can be removed by changing the expiration value to a date in the past.

1. Add the 'Manage Cookie' assertion to your policy
2. Set the following parameters, make sure to set the expiration date in the past.
   • Operation: Add or Replace
   • Name: <cookie name> (ie: userID)
   • Value: <value> (ie: [email protected])
   • Domain: <cooke domain> (ie: .example.com)
   • Path: <path> (ie: /)
   • Expires: <set a date in the past> (ie: July 26, 2012)
3. Save and Activate the policy
4. Test the endpoint/service

Read more about Manage Cookie Assertion