Encrypted Cookies in Slim Framework v3

726 views Asked by At

I am writing and application in Slim Framework v3.1. I am a lot confused on how to correctly set and get the cookies using Slim's methods.

I need your help in understanding what is the right way to read and write cookies with encryption enabled.

I also need to know how to enable encryption and decryption for the same.

Currently my $app is initialised this way -

$settings = require __DIR__ . '/../src/settings.php';
$app = new \Slim\App($settings);

My settings.php looks like below -

return [
    'settings' => [
        'displayErrorDetails' => true, // set to false in production
        'addContentLengthHeader' => false, // Allow the web server to send the content-length header

        // Renderer settings
        'renderer' => [
            'template_path' => __DIR__ . '/../templates/',
        ],
       // Cookies Encryption
        'cookies.encrypt' => true,
        'cookies.secret_key' => '53cr3t',
        'cookies.cipher' => OPENSSL_CIPHER_AES_256_CBC,
        'cookies.cipher_mode' => MCRYPT_MODE_CBC,
    ],
];
0

There are 0 answers