File Coverage

blib/lib/Plack/Session/State/Cookie.pm

Criterion	Covered	Total	%
statement	43	43	100.0
branch	16	16	100.0
condition	18	20	90.0
subroutine	11	11	100.0
pod	3	4	75.0
total	91	94	96.8

package Plack::Session::State::Cookie;
use strict;
use warnings;

our $VERSION   = '0.36';
our $AUTHORITY = 'cpan:STEVAN';

use parent 'Plack::Session::State';
use Cookie::Baker;
use Plack::Util;

use Plack::Util::Accessor qw[
    path
    domain
    expires
    secure
    httponly
    samesite
    partitioned
];

sub get_session_id {
    my ($self, $env) = @_;
    crush_cookie($env->{HTTP_COOKIE})->{$self->session_key};
}

sub merge_options {
    my($self, %options) = @_;

    delete $options{id};

    $options{path}        = $self->path || '/' if !exists $options{path};
    $options{domain}      = $self->domain      if !exists $options{domain} && defined $self->domain;
    $options{secure}      = $self->secure      if !exists $options{secure} && defined $self->secure;
    $options{httponly}    = $self->httponly    if !exists $options{httponly} && defined $self->httponly;
    $options{samesite}    = $self->samesite    if !exists $options{samesite} && defined $self->samesite;

    # https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies
    $options{partitioned} = $self->partitioned if !exists $options{partitioned} && defined $self->partitioned;


    if (!exists $options{expires} && defined $self->expires) {
        $options{expires} = time + $self->expires;
    }

    if ($options{partitioned}) {
        $options{secure} = 1;
        $options{samesite} = 'None';
    }

    return %options;
}

sub expire_session_id {
    my ($self, $id, $res, $options) = @_;
    my %opts = $self->merge_options(%$options, expires => time);
    $self->_set_cookie($id, $res, %opts);
}

sub finalize {
    my ($self, $id, $res, $options) = @_;
    my %opts = $self->merge_options(%$options);
    $self->_set_cookie($id, $res, %opts);
}

sub _set_cookie {
    my($self, $id, $res, %options) = @_;

    my $cookie = bake_cookie(
        $self->session_key, {
            value => $id,
            %options,
        }
    );
    Plack::Util::header_push($res->[1], 'Set-Cookie', $cookie);
}

1;

__END__