# `Mutare.Plug.Cookie`
[🔗](https://github.com/foxbenjaminfox/mutare_plug/blob/v0.2.1/lib/mutare/plug/cookie.ex#L1)

`:resp_cookie` — removes response-cookie mutations, flips explicit `:same_site`
cookie policy values, and drops explicit `:max_age` options. A survivor means no test
depends on this code setting/deleting the response cookie, on the cookie's SameSite
policy, or on its persistence.

    put_resp_cookie(conn, "sid", token)                    # → conn
    delete_resp_cookie(conn, "sid")                        # → conn
    put_resp_cookie(conn, "sid", token, same_site: "Lax")  # → "Strict" / "None"
    put_resp_cookie(conn, "sid", token, max_age: ttl)      # → put_resp_cookie(conn, "sid", token)

Dropping `max_age:` turns a persistent cookie into a session cookie — an option-*presence*
mutation the built-in literal families cannot produce (they mutate the duration's value,
not the entry). It applies only to `put_resp_cookie/4`; `delete_resp_cookie/3` forces
`max_age: 0` regardless of the option, so a drop there would be a no-op mutant.

Matches `Plug.Conn.put_resp_cookie/3,4` and `Plug.Conn.delete_resp_cookie/2,3`
written directly, aliased, or bare-imported. Boolean-valued cookie options such as
`:secure`, `:http_only`, `:sign`, and `:encrypt` are left to Mutare's built-in boolean
mutators (dropping one is equivalent to flipping it to its default).

---

*Consult [api-reference.md](api-reference.md) for complete listing*