Cookies

The possible cookies which can be set are outlined below with their explanations

Name	Reason
UmbCheckoutSession	The .NET Session Id (HttpOnly, essential)
UmbCheckoutSession_Basket{culture}_{currency}	The encrypted Basket for one site root culture and currency, e.g. UmbCheckoutSession_Basketen-GB_GBP

Note

The Basket cookie requires a paid license, and is only set when Store Basket In a Cookie is on. It is HttpOnly and Secure, and expires after the number of days set in the configuration.

The Basket is encrypted with ASP.NET Core Data Protection. On a load-balanced site, share the Data Protection key ring between the servers, or a server that can’t read a visitor’s Basket cookie ignores it. Clearing the Basket cookie after a Basket is cleared also needs a paid license, and a cookie cleared in a request isn’t read back later in the same request. A cookie that is corrupt is deleted; Basket cookies from UmbCheckout 1.x are split into one cookie per currency.