function cookie_options(options) {
    return Object.assign({
        sameSite: 'strict'
    }, process.env.DEBUG ? {} : {
        secure: true
    }, options || {});
}

module.exports = {
    get: function(req, name) {
        // returns "" if no cookie stored
        return JSON.parse(req.cookies[name] || '""');
    },
    set: function(res, name, data, options) {
        res.cookie(name, JSON.stringify(data), cookie_options(options));
    },
    options: cookie_options
}