123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343 |
- 'use strict';
- const debug = require('debug')('koa-session:context');
- const Session = require('./session');
- const util = require('./util');
- const COOKIE_EXP_DATE = new Date(util.CookieDateEpoch);
- const ONE_DAY = 24 * 60 * 60 * 1000;
- class ContextSession {
- /**
- * context session constructor
- * @api public
- */
- constructor(ctx, opts) {
- this.ctx = ctx;
- this.app = ctx.app;
- this.opts = Object.assign({}, opts);
- this.store = this.opts.ContextStore ? new this.opts.ContextStore(ctx) : this.opts.store;
- }
- /**
- * internal logic of `ctx.session`
- * @return {Session} session object
- *
- * @api public
- */
- get() {
- const session = this.session;
- // already retrieved
- if (session) return session;
- // unset
- if (session === false) return null;
- // create an empty session or init from cookie
- this.store ? this.create() : this.initFromCookie();
- return this.session;
- }
- /**
- * internal logic of `ctx.session=`
- * @param {Object} val session object
- *
- * @api public
- */
- set(val) {
- if (val === null) {
- this.session = false;
- return;
- }
- if (typeof val === 'object') {
- // use the original `externalKey` if exists to avoid waste storage
- this.create(val, this.externalKey);
- return;
- }
- throw new Error('this.session can only be set as null or an object.');
- }
- /**
- * init session from external store
- * will be called in the front of session middleware
- *
- * @api public
- */
- async initFromExternal() {
- debug('init from external');
- const ctx = this.ctx;
- const opts = this.opts;
- let externalKey;
- if (opts.externalKey) {
- externalKey = opts.externalKey.get(ctx);
- debug('get external key from custom %s', externalKey);
- } else {
- externalKey = ctx.cookies.get(opts.key, opts);
- debug('get external key from cookie %s', externalKey);
- }
- if (!externalKey) {
- // create a new `externalKey`
- this.create();
- return;
- }
- const json = await this.store.get(externalKey, opts.maxAge, { ctx, rolling: opts.rolling });
- if (!this.valid(json, externalKey)) {
- // create a new `externalKey`
- this.create();
- return;
- }
- // create with original `externalKey`
- this.create(json, externalKey);
- this.prevHash = util.hash(this.session.toJSON());
- }
- /**
- * init session from cookie
- * @api private
- */
- initFromCookie() {
- debug('init from cookie');
- const ctx = this.ctx;
- const opts = this.opts;
- const cookie = ctx.cookies.get(opts.key, opts);
- if (!cookie) {
- this.create();
- return;
- }
- let json;
- debug('parse %s', cookie);
- try {
- json = opts.decode(cookie);
- } catch (err) {
- // backwards compatibility:
- // create a new session if parsing fails.
- // new Buffer(string, 'base64') does not seem to crash
- // when `string` is not base64-encoded.
- // but `JSON.parse(string)` will crash.
- debug('decode %j error: %s', cookie, err);
- if (!(err instanceof SyntaxError)) {
- // clean this cookie to ensure next request won't throw again
- ctx.cookies.set(opts.key, '', opts);
- // ctx.onerror will unset all headers, and set those specified in err
- err.headers = {
- 'set-cookie': ctx.response.get('set-cookie'),
- };
- throw err;
- }
- this.create();
- return;
- }
- debug('parsed %j', json);
- if (!this.valid(json)) {
- this.create();
- return;
- }
- // support access `ctx.session` before session middleware
- this.create(json);
- this.prevHash = util.hash(this.session.toJSON());
- }
- /**
- * verify session(expired or )
- * @param {Object} value session object
- * @param {Object} key session externalKey(optional)
- * @return {Boolean} valid
- * @api private
- */
- valid(value, key) {
- const ctx = this.ctx;
- if (!value) {
- this.emit('missed', { key, value, ctx });
- return false;
- }
- if (value._expire && value._expire < Date.now()) {
- debug('expired session');
- this.emit('expired', { key, value, ctx });
- return false;
- }
- const valid = this.opts.valid;
- if (typeof valid === 'function' && !valid(ctx, value)) {
- // valid session value fail, ignore this session
- debug('invalid session');
- this.emit('invalid', { key, value, ctx });
- return false;
- }
- return true;
- }
- /**
- * @param {String} event event name
- * @param {Object} data event data
- * @api private
- */
- emit(event, data) {
- setImmediate(() => {
- this.app.emit(`session:${event}`, data);
- });
- }
- /**
- * create a new session and attach to ctx.sess
- *
- * @param {Object} [val] session data
- * @param {String} [externalKey] session external key
- * @api private
- */
- create(val, externalKey) {
- debug('create session with val: %j externalKey: %s', val, externalKey);
- if (this.store) this.externalKey = externalKey || this.opts.genid && this.opts.genid(this.ctx);
- this.session = new Session(this, val, this.externalKey);
- }
- /**
- * Commit the session changes or removal.
- *
- * @api public
- */
- async commit() {
- const session = this.session;
- const opts = this.opts;
- const ctx = this.ctx;
- // not accessed
- if (undefined === session) return;
- // removed
- if (session === false) {
- await this.remove();
- return;
- }
- const reason = this._shouldSaveSession();
- debug('should save session: %s', reason);
- if (!reason) return;
- if (typeof opts.beforeSave === 'function') {
- debug('before save');
- opts.beforeSave(ctx, session);
- }
- const changed = reason === 'changed';
- await this.save(changed);
- }
- _shouldSaveSession() {
- const prevHash = this.prevHash;
- const session = this.session;
- // force save session when `session._requireSave` set
- if (session._requireSave) return 'force';
- // do nothing if new and not populated
- const json = session.toJSON();
- if (!prevHash && !Object.keys(json).length) return '';
- // save if session changed
- const changed = prevHash !== util.hash(json);
- if (changed) return 'changed';
- // save if opts.rolling set
- if (this.opts.rolling) return 'rolling';
- // save if opts.renew and session will expired
- if (this.opts.renew) {
- const expire = session._expire;
- const maxAge = session.maxAge;
- // renew when session will expired in maxAge / 2
- if (expire && maxAge && expire - Date.now() < maxAge / 2) return 'renew';
- }
- return '';
- }
- /**
- * remove session
- * @api private
- */
- async remove() {
- // Override the default options so that we can properly expire the session cookies
- const opts = Object.assign({}, this.opts, {
- expires: COOKIE_EXP_DATE,
- maxAge: false,
- });
- const ctx = this.ctx;
- const key = opts.key;
- const externalKey = this.externalKey;
- if (externalKey) await this.store.destroy(externalKey, { ctx });
- ctx.cookies.set(key, '', opts);
- }
- /**
- * save session
- * @api private
- */
- async save(changed) {
- const opts = this.opts;
- const key = opts.key;
- const externalKey = this.externalKey;
- let json = this.session.toJSON();
- // set expire for check
- let maxAge = opts.maxAge ? opts.maxAge : ONE_DAY;
- if (maxAge === 'session') {
- // do not set _expire in json if maxAge is set to 'session'
- // also delete maxAge from options
- opts.maxAge = undefined;
- json._session = true;
- } else {
- // set expire for check
- json._expire = maxAge + Date.now();
- json._maxAge = maxAge;
- }
- // save to external store
- if (externalKey) {
- debug('save %j to external key %s', json, externalKey);
- if (typeof maxAge === 'number') {
- // ensure store expired after cookie
- maxAge += 10000;
- }
- await this.store.set(externalKey, json, maxAge, {
- changed,
- ctx: this.ctx,
- rolling: opts.rolling,
- });
- if (opts.externalKey) {
- opts.externalKey.set(this.ctx, externalKey);
- } else {
- this.ctx.cookies.set(key, externalKey, opts);
- }
- return;
- }
- // save to cookie
- debug('save %j to cookie', json);
- json = opts.encode(json);
- debug('save %s', json);
- this.ctx.cookies.set(key, json, opts);
- }
- }
- module.exports = ContextSession;
|