在Gin框架中正确删除Cookie的操作指南

// 基本删除Cookie示例
http.SetCookie(w, &http.Cookie{
    Name:    "cookie_name",
    Expires: time.Unix(0, 0), // 设置为Unix时间的零点(1970-01-01)
})

func logout(c *gin.Context) {
    // 删除Cookie
    c.SetCookie(
        "auth_token",         // Cookie名称
        "",                   // 空值
        -1,                   // 过期时间设为负数，立即过期
        "/",                  // 作用路径
        "yourdomain.com",     // 域名
        false,                // 是否仅限HTTPS
        true,                // 是否禁止JavaScript访问(HttpOnly)
    )
    
    c.JSON(200, gin.H{"message": "Logged out successfully"})
}

// 用户登出路由
router.POST("/logout", func(c *gin.Context) {
    // 删除认证token
    c.SetCookie("auth_token", "", -1, "/", "", false, true)
    
    // 删除用户偏好设置
    c.SetCookie("user_prefs", "", -1, "/", "", false, false)
    
    c.Redirect(http.StatusFound, "/login")
})

// 处理用户拒绝跟踪请求
router.POST("/privacy/reject-tracking", func(c *gin.Context) {
    // 删除所有跟踪相关的Cookie
    trackingCookies := []string{"_ga", "_gid", "_fbp", "adroll"}
    for _, name := range trackingCookies {
        c.SetCookie(name, "", -1, "/", "", false, false)
    }
    
    c.JSON(200, gin.H{"status": "tracking_cookies_removed"})
})

// 确保Cookie被删除的强化方法
func deleteCookieCompletely(c *gin.Context, name string) {
    // 尝试所有可能的路径和域名组合
    paths := []string{"/", "/admin", "/api"}
    domains := []string{"", ".yourdomain.com", "sub.yourdomain.com"}
    
    for _, path := range paths {
        for _, domain := range domains {
            c.SetCookie(name, "", -1, path, domain, false, true)
        }
    }
}

// 测试Cookie是否存在的中间件
func checkCookie(c *gin.Context) {
    if _, err := c.Cookie("test_cookie"); err == http.ErrNoCookie {
        // Cookie不存在
        c.Next()
        return
    }
    
    // Cookie仍然存在
    c.AbortWithStatusJSON(400, gin.H{"error": "cookie not deleted"})
}

func clearAllSessionCookies(c *gin.Context) {
    cookies := c.Request.Cookies()
    for _, cookie := range cookies {
        if strings.HasPrefix(cookie.Name, "session_") {
            c.SetCookie(cookie.Name, "", -1, cookie.Path, cookie.Domain, cookie.Secure, cookie.HttpOnly)
        }
    }
}

c.SetCookie(
    "modern_cookie",
    "",
    -1, // MaxAge设置为负值表示立即删除
    "/",
    "",
    false,
    true,
)

// 在Go 1.16+中设置SameSite属性
http.SetCookie(c.Writer, &http.Cookie{
    Name:     "secure_cookie",
    Value:    "",
    MaxAge:   -1,
    Path:     "/",
    Domain:   "example.com",
    Secure:   true,
    HttpOnly: true,
    SameSite: http.SameSiteLaxMode,
})