janus/segment: extract session cookie in a safe way

Author: valentino-amadeus

src/clients/Segment.ts

@@ -1,8 +1,8 @@
-import parseCookie from 'cookie'
 import { prop } from 'ramda'
 
 import { PRODUCT_HEADER } from '../constants'
 import { inflightUrlWithQuery, JanusClient } from '../HttpClient'
+import { extractSessionCookie } from './Session'
 
 export interface SegmentData {
   campaigns?: any
@@ -19,7 +19,6 @@ export interface SegmentData {
   [key: string]: any
 }
 
-const SEGMENT_COOKIE = 'vtex_segment'
 const SEGMENT_MAX_AGE_S = 60 * 60 // 60 minutes - segment is actually immutable
 const ALLOWED_QUERY_PREFIXES = ['utm', 'cultureInfo', 'supportedLocales']
 
@@ -71,15 +70,11 @@ export class Segment extends JanusClient {
   public getOrCreateSegment = async (query?: Record<string, string>, token?: string) => {
     const {
       data: segmentData,
-      headers: {
-        'set-cookie': [setCookies],
-      },
+      headers,
     } = await this.rawSegment(token, query)
-    const parsedCookie = parseCookie.parse(setCookies)
-    const segmentToken = prop(SEGMENT_COOKIE, parsedCookie)
     return {
       segmentData,
-      segmentToken,
+      segmentToken: extractSessionCookie(headers) || token,
     }
   }
 

src/clients/Session.ts

@@ -51,7 +51,7 @@ export class Session extends JanusClient {
   }
 }
 
-function extractSessionCookie(headers: Record<string, string>) {
+export function extractSessionCookie(headers: Record<string, string>) {
   for (const setCookie of headers['set-cookie'] || []) {
     const parsedCookie = parseCookie.parse(setCookie)
     const sessionCookie = parsedCookie[SESSION_COOKIE]