public static void SetCookie(this HttpResponseHeaders headers, Cookie cookie) { headers.CheckNotNull(nameof(headers)); cookie.CheckNotNull(nameof(cookie)); var cookieBuilder = new StringBuilder(HttpUtility.UrlEncode(cookie.Name) + "=" + HttpUtility.UrlEncode(cookie.Value)); if (cookie.HttpOnly) { cookieBuilder.Append("; HttpOnly"); } if (cookie.Secure) { cookieBuilder.Append("; Secure"); } headers.Add("Set-Cookie", cookieBuilder.ToString()); }