CookieSessionMapper.java

package act.session;

/*-
 * #%L
 * ACT Framework
 * %%
 * Copyright (C) 2014 - 2017 ActFramework
 * %%
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 * 
 *      http://www.apache.org/licenses/LICENSE-2.0
 * 
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 * #L%
 */

import act.conf.AppConfig;
import org.osgl.http.H;

import javax.inject.Inject;
import javax.inject.Singleton;

/**
 * Implement {@link SessionMapper} with HTTP cookie
 */
@Singleton
public class CookieSessionMapper implements SessionMapper {

    private ExpirationMapper expirationMapper;
    private String sessionCookieName;
    private String flashCookieName;
    private String cookieDomain;
    private boolean sessionSecure;
    private boolean sessionWillExpire;
    private boolean persistentSession;
    private int ttl;

    @Inject
    public CookieSessionMapper(AppConfig conf) {
        sessionCookieName = conf.sessionCookieName();
        flashCookieName = conf.flashCookieName();
        cookieDomain = conf.cookieDomain();
        sessionSecure = conf.sessionSecure();
        persistentSession = conf.persistSession();
        ttl = conf.sessionTtl();
        sessionWillExpire = ttl > 0;
        expirationMapper = new ExpirationMapper(conf);
    }

    @Override
    public void writeExpiration(long expiration, H.Response response) {
        expirationMapper.writeExpiration(expiration, response);
    }

    @Override
    public void write(String session, String flash, H.Response response) {
        writeState(session, sessionCookieName, response);
        writeState(flash, flashCookieName, response);
    }

    @Override
    public String readSession(H.Request request) {
        return readState(sessionCookieName, request);
    }

    @Override
    public String readFlash(H.Request request) {
        return readState(flashCookieName, request);
    }

    private void writeState(String state, String cookieName, H.Response response) {
        if (null == state) {
            return;
        }
        H.Cookie cookie = createCookie(cookieName, state);
        response.addCookie(cookie);
    }

    private H.Cookie createCookie(String name, String value) {
        H.Cookie cookie = new H.Cookie(name, value);
        cookie.path("/");
        cookie.domain(cookieDomain);
        cookie.httpOnly(true);
        cookie.secure(sessionSecure);
        if (sessionWillExpire && persistentSession) {
            cookie.maxAge(ttl);
        }
        return cookie;
    }

    private String readState(String cookieName, H.Request request) {
        H.Cookie cookie = request.cookie(cookieName);
        return null == cookie ? null : cookie.value();
    }

}