You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
303 lines
8.3 KiB
303 lines
8.3 KiB
<?php
|
|
|
|
/*
|
|
* This file is part of the Symfony package.
|
|
*
|
|
* (c) Fabien Potencier <fabien@symfony.com>
|
|
*
|
|
* For the full copyright and license information, please view the LICENSE
|
|
* file that was distributed with this source code.
|
|
*/
|
|
|
|
namespace Symfony\Component\HttpFoundation;
|
|
|
|
/**
|
|
* Represents a cookie.
|
|
*
|
|
* @author Johannes M. Schmitt <schmittjoh@gmail.com>
|
|
*/
|
|
class Cookie
|
|
{
|
|
const SAMESITE_NONE = 'none';
|
|
const SAMESITE_LAX = 'lax';
|
|
const SAMESITE_STRICT = 'strict';
|
|
|
|
protected $name;
|
|
protected $value;
|
|
protected $domain;
|
|
protected $expire;
|
|
protected $path;
|
|
protected $secure;
|
|
protected $httpOnly;
|
|
|
|
private $raw;
|
|
private $sameSite;
|
|
|
|
private static $reservedCharsList = "=,; \t\r\n\v\f";
|
|
private static $reservedCharsFrom = ['=', ',', ';', ' ', "\t", "\r", "\n", "\v", "\f"];
|
|
private static $reservedCharsTo = ['%3D', '%2C', '%3B', '%20', '%09', '%0D', '%0A', '%0B', '%0C'];
|
|
|
|
/**
|
|
* Creates cookie from raw header string.
|
|
*
|
|
* @param string $cookie
|
|
* @param bool $decode
|
|
*
|
|
* @return static
|
|
*/
|
|
public static function fromString($cookie, $decode = false)
|
|
{
|
|
$data = [
|
|
'expires' => 0,
|
|
'path' => '/',
|
|
'domain' => null,
|
|
'secure' => false,
|
|
'httponly' => false,
|
|
'raw' => !$decode,
|
|
'samesite' => null,
|
|
];
|
|
foreach (explode(';', $cookie) as $part) {
|
|
if (false === strpos($part, '=')) {
|
|
$key = trim($part);
|
|
$value = true;
|
|
} else {
|
|
list($key, $value) = explode('=', trim($part), 2);
|
|
$key = trim($key);
|
|
$value = trim($value);
|
|
}
|
|
if (!isset($data['name'])) {
|
|
$data['name'] = $decode ? urldecode($key) : $key;
|
|
$data['value'] = true === $value ? null : ($decode ? urldecode($value) : $value);
|
|
continue;
|
|
}
|
|
switch ($key = strtolower($key)) {
|
|
case 'name':
|
|
case 'value':
|
|
break;
|
|
case 'max-age':
|
|
$data['expires'] = time() + (int) $value;
|
|
break;
|
|
default:
|
|
$data[$key] = $value;
|
|
break;
|
|
}
|
|
}
|
|
|
|
return new static($data['name'], $data['value'], $data['expires'], $data['path'], $data['domain'], $data['secure'], $data['httponly'], $data['raw'], $data['samesite']);
|
|
}
|
|
|
|
/**
|
|
* @param string $name The name of the cookie
|
|
* @param string|null $value The value of the cookie
|
|
* @param int|string|\DateTimeInterface $expire The time the cookie expires
|
|
* @param string $path The path on the server in which the cookie will be available on
|
|
* @param string|null $domain The domain that the cookie is available to
|
|
* @param bool $secure Whether the cookie should only be transmitted over a secure HTTPS connection from the client
|
|
* @param bool $httpOnly Whether the cookie will be made accessible only through the HTTP protocol
|
|
* @param bool $raw Whether the cookie value should be sent with no url encoding
|
|
* @param string|null $sameSite Whether the cookie will be available for cross-site requests
|
|
*
|
|
* @throws \InvalidArgumentException
|
|
*/
|
|
public function __construct($name, $value = null, $expire = 0, $path = '/', $domain = null, $secure = false, $httpOnly = true, $raw = false, $sameSite = null)
|
|
{
|
|
// from PHP source code
|
|
if ($raw && false !== strpbrk($name, self::$reservedCharsList)) {
|
|
throw new \InvalidArgumentException(sprintf('The cookie name "%s" contains invalid characters.', $name));
|
|
}
|
|
|
|
if (empty($name)) {
|
|
throw new \InvalidArgumentException('The cookie name cannot be empty.');
|
|
}
|
|
|
|
// convert expiration time to a Unix timestamp
|
|
if ($expire instanceof \DateTimeInterface) {
|
|
$expire = $expire->format('U');
|
|
} elseif (!is_numeric($expire)) {
|
|
$expire = strtotime($expire);
|
|
|
|
if (false === $expire) {
|
|
throw new \InvalidArgumentException('The cookie expiration time is not valid.');
|
|
}
|
|
}
|
|
|
|
$this->name = $name;
|
|
$this->value = $value;
|
|
$this->domain = $domain;
|
|
$this->expire = 0 < $expire ? (int) $expire : 0;
|
|
$this->path = empty($path) ? '/' : $path;
|
|
$this->secure = (bool) $secure;
|
|
$this->httpOnly = (bool) $httpOnly;
|
|
$this->raw = (bool) $raw;
|
|
|
|
if (null !== $sameSite) {
|
|
$sameSite = strtolower($sameSite);
|
|
}
|
|
|
|
if (!\in_array($sameSite, [self::SAMESITE_LAX, self::SAMESITE_STRICT, self::SAMESITE_NONE, null], true)) {
|
|
throw new \InvalidArgumentException('The "sameSite" parameter value is not valid.');
|
|
}
|
|
|
|
$this->sameSite = $sameSite;
|
|
}
|
|
|
|
/**
|
|
* Returns the cookie as a string.
|
|
*
|
|
* @return string The cookie
|
|
*/
|
|
public function __toString()
|
|
{
|
|
if ($this->isRaw()) {
|
|
$str = $this->getName();
|
|
} else {
|
|
$str = str_replace(self::$reservedCharsFrom, self::$reservedCharsTo, $this->getName());
|
|
}
|
|
|
|
$str .= '=';
|
|
|
|
if ('' === (string) $this->getValue()) {
|
|
$str .= 'deleted; expires='.gmdate('D, d-M-Y H:i:s T', time() - 31536001).'; Max-Age=0';
|
|
} else {
|
|
$str .= $this->isRaw() ? $this->getValue() : rawurlencode($this->getValue());
|
|
|
|
if (0 !== $this->getExpiresTime()) {
|
|
$str .= '; expires='.gmdate('D, d-M-Y H:i:s T', $this->getExpiresTime()).'; Max-Age='.$this->getMaxAge();
|
|
}
|
|
}
|
|
|
|
if ($this->getPath()) {
|
|
$str .= '; path='.$this->getPath();
|
|
}
|
|
|
|
if ($this->getDomain()) {
|
|
$str .= '; domain='.$this->getDomain();
|
|
}
|
|
|
|
if (true === $this->isSecure()) {
|
|
$str .= '; secure';
|
|
}
|
|
|
|
if (true === $this->isHttpOnly()) {
|
|
$str .= '; httponly';
|
|
}
|
|
|
|
if (null !== $this->getSameSite()) {
|
|
$str .= '; samesite='.$this->getSameSite();
|
|
}
|
|
|
|
return $str;
|
|
}
|
|
|
|
/**
|
|
* Gets the name of the cookie.
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getName()
|
|
{
|
|
return $this->name;
|
|
}
|
|
|
|
/**
|
|
* Gets the value of the cookie.
|
|
*
|
|
* @return string|null
|
|
*/
|
|
public function getValue()
|
|
{
|
|
return $this->value;
|
|
}
|
|
|
|
/**
|
|
* Gets the domain that the cookie is available to.
|
|
*
|
|
* @return string|null
|
|
*/
|
|
public function getDomain()
|
|
{
|
|
return $this->domain;
|
|
}
|
|
|
|
/**
|
|
* Gets the time the cookie expires.
|
|
*
|
|
* @return int
|
|
*/
|
|
public function getExpiresTime()
|
|
{
|
|
return $this->expire;
|
|
}
|
|
|
|
/**
|
|
* Gets the max-age attribute.
|
|
*
|
|
* @return int
|
|
*/
|
|
public function getMaxAge()
|
|
{
|
|
$maxAge = $this->expire - time();
|
|
|
|
return 0 >= $maxAge ? 0 : $maxAge;
|
|
}
|
|
|
|
/**
|
|
* Gets the path on the server in which the cookie will be available on.
|
|
*
|
|
* @return string
|
|
*/
|
|
public function getPath()
|
|
{
|
|
return $this->path;
|
|
}
|
|
|
|
/**
|
|
* Checks whether the cookie should only be transmitted over a secure HTTPS connection from the client.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isSecure()
|
|
{
|
|
return $this->secure;
|
|
}
|
|
|
|
/**
|
|
* Checks whether the cookie will be made accessible only through the HTTP protocol.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isHttpOnly()
|
|
{
|
|
return $this->httpOnly;
|
|
}
|
|
|
|
/**
|
|
* Whether this cookie is about to be cleared.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isCleared()
|
|
{
|
|
return 0 !== $this->expire && $this->expire < time();
|
|
}
|
|
|
|
/**
|
|
* Checks if the cookie value should be sent with no url encoding.
|
|
*
|
|
* @return bool
|
|
*/
|
|
public function isRaw()
|
|
{
|
|
return $this->raw;
|
|
}
|
|
|
|
/**
|
|
* Gets the SameSite attribute.
|
|
*
|
|
* @return string|null
|
|
*/
|
|
public function getSameSite()
|
|
{
|
|
return $this->sameSite;
|
|
}
|
|
}
|
|
|