It should be a `non-zero-digit` https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Set-Cookie#Syntax https://github.com/keplerproject/wsapi/blob/20890c4673cd5259e6cca323353b463d0a5911e7/src/wsapi/response.lua#L69