@Override public Session session() { return req.session(); }
@Override public Object getSessionIdentifier() { return req.session().id(); }
@Override public String getOrCreateSessionId(WebContext context) { return req.session().id(); }
private String profileID(final boolean useSession, final Request req) { return req.<String>ifGet(Auth.ID) .orElseGet(() -> useSession ? req.session().get(Auth.ID).value(null) : null); }
@Override public Object getSessionAttribute(final String name) { Session session = req.session(); return AuthSerializer.strToObject(session.get(name).value(null)); }
@Override public void setSessionAttribute(final String name, final Object value) { Session session = req.session(); if (value == null) { session.unset(name); } else { session.set(name, AuthSerializer.objToStr(value)); } }
@Override public void set(WebContext context, String key, Object value) { if (value == null) { req.ifSession().ifPresent(session -> session.unset(key)); } else { req.session().set(key, objToStr(value)); } }
@Override public void handle(final Request req, final Response rsp, final Route.Chain chain) throws Throwable { /** * Get or generate a token */ Session session = req.session(); String token = session.get(name).toOptional().orElseGet(() -> { String newToken = generator.apply(req); session.set(name, newToken); return newToken; }); req.set(name, token); if (requireToken.test(req)) { String candidate = req.header(name).toOptional() .orElseGet(() -> req.param(name).toOptional().orElse(null)); if (!token.equals(candidate)) { throw new Err(Status.FORBIDDEN, "Invalid Csrf token: " + candidate); } } chain.next(req, rsp); } }
log.debug("profile : {}", profile); Session session = req.session(); if (profile != null) { String id = profile.getId();
@Override public Session session() { return req.session(); }
@Override public Object getSessionIdentifier() { return req.session().id(); }
private String profileID(final boolean useSession, final Request req) { return req.<String>ifGet(Auth.ID) .orElseGet(() -> useSession ? req.session().get(Auth.ID).value(null) : null); }
@Override public void setSessionAttribute(final String name, final Object value) { Session session = req.session(); if (value == null) { session.unset(name); } else { session.set(name, AuthSerializer.objToStr(value)); } }
@Override public Object getSessionAttribute(final String name) { Session session = req.session(); return AuthSerializer.strToObject(session.get(name).value(null)); }
@Override public void handle(final Request req, final Response rsp, final Route.Chain chain) throws Throwable { /** * Get or generate a token */ Session session = req.session(); String token = session.get(name).toOptional().orElseGet(() -> { String newToken = generator.apply(req); session.set(name, newToken); return newToken; }); req.set(name, token); if (requireToken.test(req)) { String candidate = req.header(name).toOptional() .orElseGet(() -> req.param(name).toOptional().orElse(null)); if (!token.equals(candidate)) { throw new Err(Status.FORBIDDEN, "Invalid Csrf token: " + candidate); } } chain.next(req, rsp); } }
log.debug("profile : {}", profile); Session session = req.session(); if (profile != null) { String id = profile.getId();