io.vertx.ext.web.handler.impl.CookieHandlerImpl Maven / Gradle / Ivy

/*
 * Copyright 2014 Red Hat, Inc.
 *
 *  All rights reserved. This program and the accompanying materials
 *  are made available under the terms of the Eclipse Public License v1.0
 *  and Apache License v2.0 which accompanies this distribution.
 *
 *  The Eclipse Public License is available at
 *  http://www.eclipse.org/legal/epl-v10.html
 *
 *  The Apache License v2.0 is available at
 *  http://www.opensource.org/licenses/apache2.0.php
 *
 *  You may elect to redistribute this code under either of these licenses.
 */

package io.vertx.ext.web.handler.impl;

import io.netty.handler.codec.http.cookie.ServerCookieDecoder;
import io.vertx.ext.web.Cookie;
import io.vertx.ext.web.impl.CookieImpl;
import io.vertx.ext.web.handler.CookieHandler;
import io.vertx.ext.web.RoutingContext;

import java.util.Set;

import static io.vertx.core.http.HttpHeaders.*;

/**
 * # CookieParser
 * 
 * Parse request cookies both signed or plain.
 * 

 * If a cooke value starts with *s:* it means that it is a signed cookie. In this case the value is expected to be
 * *s:<cookie>.<signature>*. The signature is *HMAC + SHA256*.
 * 
 * When the Cookie parser is initialized with a secret then that value is used to verify if a cookie is valid.
 *
 * @author Paulo Lopes
 * @author Tim Fox
 */
public class CookieHandlerImpl implements CookieHandler {

  @Override
  public void handle(RoutingContext context) {
    String cookieHeader = context.request().headers().get(COOKIE);

    if (cookieHeader != null) {
      Set nettyCookies = ServerCookieDecoder.STRICT.decode(cookieHeader);
      for (io.netty.handler.codec.http.cookie.Cookie cookie : nettyCookies) {
        Cookie ourCookie = new CookieImpl(cookie);
        context.addCookie(ourCookie);
      }
    }

    context.addHeadersEndHandler(v -> {
      // save the cookies
      Set cookies = context.cookies();
      for (Cookie cookie: cookies) {
        if (cookie.isChanged()) {
          context.response().headers().add(SET_COOKIE, cookie.encode());
        }
      }
    });

    context.next();
  }



}