Fixed I generation to use SHA1 instead of sequential. Added sane defaults to Middleware.

[catagits/Web-Session.git] / lib / Plack / Session / State.pm

package Plack::Session::State;
use strict;
use warnings;

use Plack::Util::Accessor qw[ session_key ];
use Digest::SHA1;

sub new {
    my ($class, %params) = @_;
    bless {
        session_key => $params{ session_key } || 'plack_session',
        expired     => {}
    } => $class;
}

sub expire_session_id {
    my ($self, $id) = @_;
    $self->{expired}->{ $id }++;
}

sub check_expired {
    my ($self, $id) = @_;
    return unless $id && not exists $self->{expired}->{ $id };
    return $id;
}

# given a request, get the
# session id from it
sub get_session_id {
    my ($self, $request) = @_;
    $self->extract( $request )
        ||
    $self->generate( $request )
}

sub extract {
    my ($self, $request) = @_;
    $self->check_expired( $request->param( $self->session_key ) );
}

sub generate {
    my $self = shift;
    return Digest::SHA1::sha1_hex(rand() . $$ . {} . time);
}


sub finalize {
    my ($self, $id, $response) = @_;
    ();
}

1;