projectdiscovery/nuclei · error

[%s] invalid raw cookie in cookiesAuth: %s

Error message

[%s] invalid raw cookie in cookiesAuth: %s

What it means

Error "[%s] invalid raw cookie in cookiesAuth: %s" thrown in projectdiscovery/nuclei.

Source

Thrown at pkg/authprovider/authx/dynamic.go:184

	}

	// check username, password and token
	if strings.Contains(secret.Username, "{{") {
		secret.Username = replacer.Replace(secret.Username, d.Extracted)
	}
	if strings.Contains(secret.Password, "{{") {
		secret.Password = replacer.Replace(secret.Password, d.Extracted)
	}
	if strings.Contains(secret.Token, "{{") {
		secret.Token = replacer.Replace(secret.Token, d.Extracted)
	}

	// now attempt to parse the cookies
	secret.skipCookieParse = false
	for i, cookie := range secret.Cookies {
		if cookie.Raw != "" {
			if err := cookie.Parse(); err != nil {
				return fmt.Errorf("[%s] invalid raw cookie in cookiesAuth: %s", d.TemplatePath, err)
			}
			secret.Cookies[i] = cookie
		}
	}
	return nil
}

// GetStrategies returns the auth strategies for the dynamic secret
func (d *Dynamic) GetStrategies() []AuthStrategy {
	// Ensure fetch has completed before returning strategies.
	// Fetch errors are treated as non-fatal here so a failed dynamic auth fetch
	// does not terminate the entire scan process.
	_ = d.Fetch(false)

	if d.fetchState != nil && d.fetchState.err != nil {
		return nil
	}
	var strategies []AuthStrategy

View on GitHub (pinned to 265b3a3dec)

When it happens

Trigger: Thrown at pkg/authprovider/authx/dynamic.go:184 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of projectdiscovery/nuclei@265b3a3dec (2026-08-15). Data as JSON: /api/errors/4e257e8cadb459a9. Report an issue: GitHub.