[fix] remove cookie from demo app (#6602)

Author: Rich-Harris

.changeset/modern-apricots-develop.md

@@ -0,0 +1,5 @@
+---
+'create-svelte': patch
+---
+
+Remove cookie package from demo app

packages/create-svelte/templates/default/package.template.json

@@ -14,7 +14,6 @@
 	},
 	"type": "module",
 	"dependencies": {
-		"@fontsource/fira-mono": "^4.5.0",
-		"cookie": "^0.4.1"
+		"@fontsource/fira-mono": "^4.5.0"
 	}
 }

packages/create-svelte/templates/default/src/hooks.ts

@@ -1,24 +1,17 @@
 import type { Handle } from '@sveltejs/kit';
-import * as cookie from 'cookie';
 
 /** @type {import('@sveltejs/kit').Handle} */
 export const handle: Handle = async ({ event, resolve }) => {
-	const cookies = cookie.parse(event.request.headers.get('cookie') || '');
-	event.locals.userid = cookies['userid'] || crypto.randomUUID();
+	let userid = event.cookies.get('userid');
 
-	const response = await resolve(event);
-
-	if (!cookies['userid']) {
+	if (!userid) {
 		// if this is the first time the user has visited this app,
 		// set a cookie so that we recognise them when they return
-		response.headers.set(
-			'set-cookie',
-			cookie.serialize('userid', event.locals.userid, {
-				path: '/',
-				httpOnly: true
-			})
-		);
+		userid = crypto.randomUUID();
+		event.cookies.set('userid', userid, { path: '/' });
 	}
 
-	return response;
+	event.locals.userid = userid;
+
+	return resolve(event);
 };