io.gravitee.rest.api.security.cookies.CookieGenerator Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of gravitee-apim-rest-api-security Show documentation

There is a newer version: 4.5.2

Show newest version

/*
 * Copyright © 2015 The Gravitee team (http://gravitee.io)
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package io.gravitee.rest.api.security.cookies;

import static io.gravitee.rest.api.service.common.JWTHelper.DefaultValues.DEFAULT_JWT_EXPIRE_AFTER;

import javax.servlet.http.Cookie;
import org.springframework.core.env.Environment;

/**
 * @author David BRASSELY (david.brassely at graviteesource.com)
 * @author Azize Elamrani (azize at gravitee.io)
 * @author GraviteeSource Team
 */
public class CookieGenerator {

    private static final String DEFAULT_JWT_COOKIE_PATH = "/";
    private static final String DEFAULT_JWT_COOKIE_DOMAIN = "";

    private final Environment environment;

    public CookieGenerator(Environment environment) {
        this.environment = environment;
    }

    public Cookie generate(final String name, final String value, final boolean httpOnly) {
        final boolean isJettySecured = this.environment.getProperty("jetty.secured", Boolean.class, Boolean.FALSE);

        final Cookie cookie = new Cookie(name, value);
        cookie.setHttpOnly(httpOnly);
        cookie.setSecure(environment.getProperty("jwt.cookie-secure", Boolean.class, isJettySecured));
        cookie.setPath(environment.getProperty("jwt.cookie-path", DEFAULT_JWT_COOKIE_PATH));
        cookie.setDomain(environment.getProperty("jwt.cookie-domain", DEFAULT_JWT_COOKIE_DOMAIN));
        cookie.setMaxAge(value == null ? 0 : environment.getProperty("jwt.expire-after", Integer.class, DEFAULT_JWT_EXPIRE_AFTER));

        return cookie;
    }

    public Cookie generate(final String name, final String value) {
        return generate(name, value, true);
    }

    public Cookie generate(final String value) {
        return generate("Auth-Graviteeio-APIM", value);
    }
}