123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182 |
- /*!
- * cookie-parser
- * Copyright(c) 2014 TJ Holowaychuk
- * Copyright(c) 2015 Douglas Christopher Wilson
- * MIT Licensed
- */
- 'use strict'
- /**
- * Module dependencies.
- * @private
- */
- var cookie = require('cookie')
- var signature = require('cookie-signature')
- /**
- * Module exports.
- * @public
- */
- module.exports = cookieParser
- module.exports.JSONCookie = JSONCookie
- module.exports.JSONCookies = JSONCookies
- module.exports.signedCookie = signedCookie
- module.exports.signedCookies = signedCookies
- /**
- * Parse Cookie header and populate `req.cookies`
- * with an object keyed by the cookie names.
- *
- * @param {string|array} [secret] A string (or array of strings) representing cookie signing secret(s).
- * @param {Object} [options]
- * @return {Function}
- * @public
- */
- function cookieParser (secret, options) {
- var secrets = !secret || Array.isArray(secret)
- ? (secret || [])
- : [secret]
- return function cookieParser (req, res, next) {
- if (req.cookies) {
- return next()
- }
- var cookies = req.headers.cookie
- req.secret = secrets[0]
- req.cookies = Object.create(null)
- req.signedCookies = Object.create(null)
- // no cookies
- if (!cookies) {
- return next()
- }
- req.cookies = cookie.parse(cookies, options)
- // parse signed cookies
- if (secrets.length !== 0) {
- req.signedCookies = signedCookies(req.cookies, secrets)
- req.signedCookies = JSONCookies(req.signedCookies)
- }
- // parse JSON cookies
- req.cookies = JSONCookies(req.cookies)
- next()
- }
- }
- /**
- * Parse JSON cookie string.
- *
- * @param {String} str
- * @return {Object} Parsed object or undefined if not json cookie
- * @public
- */
- function JSONCookie (str) {
- if (typeof str !== 'string' || str.substr(0, 2) !== 'j:') {
- return undefined
- }
- try {
- return JSON.parse(str.slice(2))
- } catch (err) {
- return undefined
- }
- }
- /**
- * Parse JSON cookies.
- *
- * @param {Object} obj
- * @return {Object}
- * @public
- */
- function JSONCookies (obj) {
- var cookies = Object.keys(obj)
- var key
- var val
- for (var i = 0; i < cookies.length; i++) {
- key = cookies[i]
- val = JSONCookie(obj[key])
- if (val) {
- obj[key] = val
- }
- }
- return obj
- }
- /**
- * Parse a signed cookie string, return the decoded value.
- *
- * @param {String} str signed cookie string
- * @param {string|array} secret
- * @return {String} decoded value
- * @public
- */
- function signedCookie (str, secret) {
- if (typeof str !== 'string') {
- return undefined
- }
- if (str.substr(0, 2) !== 's:') {
- return str
- }
- var secrets = !secret || Array.isArray(secret)
- ? (secret || [])
- : [secret]
- for (var i = 0; i < secrets.length; i++) {
- var val = signature.unsign(str.slice(2), secrets[i])
- if (val !== false) {
- return val
- }
- }
- return false
- }
- /**
- * Parse signed cookies, returning an object containing the decoded key/value
- * pairs, while removing the signed key from obj.
- *
- * @param {Object} obj
- * @param {string|array} secret
- * @return {Object}
- * @public
- */
- function signedCookies (obj, secret) {
- var cookies = Object.keys(obj)
- var dec
- var key
- var ret = Object.create(null)
- var val
- for (var i = 0; i < cookies.length; i++) {
- key = cookies[i]
- val = obj[key]
- dec = signedCookie(val, secret)
- if (val !== dec) {
- ret[key] = dec
- delete obj[key]
- }
- }
- return ret
- }
|