Merge pull request #35649 from andrehjr/fix-override-of-cookies-controller-specs

Don't override @set_cookies on CookieJar#update_cookies_from_jar'

actionpack/lib/action_dispatch/middleware/cookies.rb

@@ -338,7 +338,7 @@ def update(other_hash)
 
       def update_cookies_from_jar
         request_jar = @request.cookie_jar.instance_variable_get(:@cookies)
-        set_cookies = request_jar.reject { |k, _| @delete_cookies.key?(k) }
+        set_cookies = request_jar.reject { |k, _| @delete_cookies.key?(k) || @set_cookies.key?(k) }
 
         @cookies.update set_cookies if set_cookies
       end

actionpack/test/dispatch/cookies_test.rb

@@ -123,6 +123,11 @@ def access_frozen_cookies
       head :ok
     end
 
+    def set_cookie_if_not_present
+      cookies["user_name"] = "alice" unless cookies["user_name"].present?
+      head :ok
+    end
+
     def logout
       cookies.delete("user_name")
       head :ok
@@ -1128,6 +1133,14 @@ def test_cookies_are_not_cleared
     assert_equal "bar", @controller.encrypted_cookie
   end
 
+  def test_cookie_override
+    get :set_cookie_if_not_present
+    assert_equal "alice", cookies["user_name"]
+    cookies["user_name"] = "bob"
+    get :set_cookie_if_not_present
+    assert_equal "bob", cookies["user_name"]
+  end
+
   def test_signed_cookie_with_expires_set_relatively
     request.env["action_dispatch.use_cookies_with_metadata"] = true