X-Git-Url: http://git.shadowcat.co.uk/gitweb/gitweb.cgi?p=catagits%2FCatalyst-Plugin-Session-State-Cookie.git;a=blobdiff_plain;f=lib%2FCatalyst%2FPlugin%2FSession%2FState%2FCookie.pm;h=7fbde70b66c4309deec3f35f7b5bfea1458dae82;hp=0bef033433cf8dbec9dbe96d6aad6f7295716b89;hb=3e8b97ed68abf4af61db73b5cb02e27a902642fb;hpb=1e986fd57422a13babc4305f9f95f1d50b71c2cd diff --git a/lib/Catalyst/Plugin/Session/State/Cookie.pm b/lib/Catalyst/Plugin/Session/State/Cookie.pm index 0bef033..7fbde70 100644 --- a/lib/Catalyst/Plugin/Session/State/Cookie.pm +++ b/lib/Catalyst/Plugin/Session/State/Cookie.pm @@ -7,24 +7,33 @@ use warnings; use NEXT; use Catalyst::Utils (); -our $VERSION = "0.02"; +our $VERSION = "0.04"; sub setup_session { my $c = shift; $c->NEXT::setup_session(@_); + $c->config->{session}{cookie_name} ||= Catalyst::Utils::appprefix($c) . '_session'; } -sub finalize_cookies { - my $c = shift; +sub extend_session_id { + my ( $c, $sid, $expires ) = @_; - if ( $c->sessionid ) { - $c->update_session_cookie( $c->make_session_cookie ); + if ( my $cookie = $c->get_session_cookie ) { + $c->update_session_cookie( $c->make_session_cookie( $sid ) ); } - return $c->NEXT::finalize_cookies(@_); + $c->NEXT::extend_session_id( @_ ); +} + +sub set_session_id { + my ( $c, $sid ) = @_; + + $c->update_session_cookie( $c->make_session_cookie( $sid ) ); + + return $c->NEXT::set_session_id(@_); } sub update_session_cookie { @@ -34,24 +43,36 @@ sub update_session_cookie { } sub make_session_cookie { - my $c = shift; + my ( $c, $sid, %attrs ) = @_; my $cfg = $c->config->{session}; my $cookie = { - value => $c->sessionid, + value => $sid, ( $cfg->{cookie_domain} ? ( domain => $cfg->{cookie_domain} ) : () ), + %attrs, }; - $cookie->{expires}=$c->calc_expiry(); + unless ( exists $cookie->{expires} ) { + $cookie->{expires} = $c->calculate_session_cookie_expires(); + } + + $cookie->{secure} = 1 if $cfg->{cookie_secure}; return $cookie; } -sub calc_expiry { - my $c=shift; - my $cfg = $c->config->{session}; - my $value= $c->NEXT::calc_expiry(@_); +sub calc_expiry { # compat + my $c = shift; + $c->NEXT::calc_expiry( @_ ) || $c->calculate_session_cookie_expires( @_ ); +} + +sub calculate_session_cookie_expires { + my $c = shift; + my $cfg = $c->config->{session}; + + my $value = $c->NEXT::calculate_session_cookie_expires(@_); return $value if $value; + if ( exists $cfg->{cookie_expires} ) { if ( $cfg->{cookie_expires} > 0 ) { return time() + $cfg->{cookie_expires}; @@ -61,24 +82,36 @@ sub calc_expiry { } } else { - return $c->session_expires; + return $c->session_expires; } } -sub prepare_cookies { +sub get_session_cookie { my $c = shift; - my $ret = $c->NEXT::prepare_cookies(@_); - my $cookie_name = $c->config->{session}{cookie_name}; - if ( my $cookie = $c->request->cookies->{$cookie_name} ) { + return $c->request->cookies->{$cookie_name}; +} + +sub get_session_id { + my $c = shift; + + if ( my $cookie = $c->get_session_cookie ) { my $sid = $cookie->value; - $c->sessionid($sid); $c->log->debug(qq/Found sessionid "$sid" in cookie/) if $c->debug; + return $sid if $sid; } - return $ret; + $c->NEXT::get_session_id(@_); +} + +sub delete_session_id { + my ( $c, $sid ) = @_; + + $c->update_session_cookie( $c->make_session_cookie( $sid, expires => 0 ) ); + + $c->NEXT::delete_session_id($sid); } __PACKAGE__ @@ -153,6 +186,10 @@ Number of seconds from now you want to elapse before cookie will expire. Set to 0 to create a session cookie, ie one which will die when the user's browser is shut down. +=item cookie_secure + +If this attribute set true, the cookie will only be sent via HTTPS. + =back =head1 CAVEATS