I have a project that track two shopping carts and I have cookies set up to track what is in each cart "shopping_cart" and "sc_shopping_cart". However when I try to read the cookies in my razor page using request.cookies only "shopping_cart" shows up. If I check in my browser, both of the cookies are set. Visual Studio Locals, Chrome=>Storage=>Cookies

The strange thing is that I can read and update "sc_shopping_cart" through javascript.

Here is C# code I'm using:

        public static Dictionary<int,int> GetScCartDictionary(HttpRequest request, HttpResponse response)
    {
        string cookieValue = request.Cookies["sc_shopping_cart"] ?? "";

        try
                                                                                                                                                                                                     {
            var cart = System.Text.Encoding.UTF8.GetString(Convert.FromBase64String(cookieValue));
            Console.WriteLine("[CartHelper] cart=" + cookieValue + " -> " + cart);
            var dictionary = JsonSerializer.Deserialize<Dictionary<int, int>>(cart);
            if(dictionary != null)
            {
                return dictionary;
            }
        }
        catch (Exception)
        {

        }

        if(cookieValue.Length > 0)
        {
            // this cookie is not valid => delete it
            response.Cookies.Delete("sc_shopping_cart");
        }

        return new Dictionary<int, int>();
    }

Any help is greatly appreciated.

Thanks, Dave

I have a project that track two shopping carts and I have cookies set up to track what is in each cart "shopping_cart" and "sc_shopping_cart". However when I try to read the cookies in my razor page using request.cookies only "shopping_cart" shows up. If I check in my browser, both of the cookies are set. Visual Studio Locals, Chrome=>Storage=>Cookies

The strange thing is that I can read and update "sc_shopping_cart" through javascript.

Here is C# code I'm using:

        public static Dictionary<int,int> GetScCartDictionary(HttpRequest request, HttpResponse response)
    {
        string cookieValue = request.Cookies["sc_shopping_cart"] ?? "";

        try
                                                                                                                                                                                                     {
            var cart = System.Text.Encoding.UTF8.GetString(Convert.FromBase64String(cookieValue));
            Console.WriteLine("[CartHelper] cart=" + cookieValue + " -> " + cart);
            var dictionary = JsonSerializer.Deserialize<Dictionary<int, int>>(cart);
            if(dictionary != null)
            {
                return dictionary;
            }
        }
        catch (Exception)
        {

        }

        if(cookieValue.Length > 0)
        {
            // this cookie is not valid => delete it
            response.Cookies.Delete("sc_shopping_cart");
        }

        return new Dictionary<int, int>();
    }

Any help is greatly appreciated.

Thanks, Dave

• c#
• asp-core
• cookies

1 Answer 1

The issue might be related to cookie scope, SameSite policy, or HttpOnly settings. You can use F12 developer tools to check them:

If the issue related it, you could change the cookie setting via the CookieOptions:

        Response.Cookies.Append("sc_shopping_cart", "sc shopping_cart value", new CookieOptions
        {
            HttpOnly = true, // Prevent JavaScript access (helps against XSS)
            Secure = true,   // Only sent over HTTPS
            SameSite = SameSiteMode.Strict, // Prevent CSRF attacks
            Expires = DateTime.UtcNow.AddHours(1)
        });

Besides, you can also try to use the F12 Network Tab to check the request header and confirm the cookie is being sent.