| /*! |
| * cookie |
| * Copyright(c) 2012-2014 Roman Shtylman |
| * Copyright(c) 2015 Douglas Christopher Wilson |
| * MIT Licensed |
| */ |
| |
| 'use strict'; |
| |
| /** |
| * Module exports. |
| * @public |
| */ |
| |
| exports.parse = parse; |
| exports.serialize = serialize; |
| |
| /** |
| * Module variables. |
| * @private |
| */ |
| |
| var decode = decodeURIComponent; |
| var encode = encodeURIComponent; |
| var pairSplitRegExp = /; */; |
| |
| /** |
| * RegExp to match field-content in RFC 7230 sec 3.2 |
| * |
| * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ] |
| * field-vchar = VCHAR / obs-text |
| * obs-text = %x80-FF |
| */ |
| |
| var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/; |
| |
| /** |
| * Parse a cookie header. |
| * |
| * Parse the given cookie header string into an object |
| * The object has the various cookies as keys(names) => values |
| * |
| * @param {string} str |
| * @param {object} [options] |
| * @return {object} |
| * @public |
| */ |
| |
| function parse(str, options) { |
| if (typeof str !== 'string') { |
| throw new TypeError('argument str must be a string'); |
| } |
| |
| var obj = {} |
| var opt = options || {}; |
| var pairs = str.split(pairSplitRegExp); |
| var dec = opt.decode || decode; |
| |
| for (var i = 0; i < pairs.length; i++) { |
| var pair = pairs[i]; |
| var eq_idx = pair.indexOf('='); |
| |
| // skip things that don't look like key=value |
| if (eq_idx < 0) { |
| continue; |
| } |
| |
| var key = pair.substr(0, eq_idx).trim() |
| var val = pair.substr(++eq_idx, pair.length).trim(); |
| |
| // quoted values |
| if ('"' == val[0]) { |
| val = val.slice(1, -1); |
| } |
| |
| // only assign once |
| if (undefined == obj[key]) { |
| obj[key] = tryDecode(val, dec); |
| } |
| } |
| |
| return obj; |
| } |
| |
| /** |
| * Serialize data into a cookie header. |
| * |
| * Serialize the a name value pair into a cookie string suitable for |
| * http headers. An optional options object specified cookie parameters. |
| * |
| * serialize('foo', 'bar', { httpOnly: true }) |
| * => "foo=bar; httpOnly" |
| * |
| * @param {string} name |
| * @param {string} val |
| * @param {object} [options] |
| * @return {string} |
| * @public |
| */ |
| |
| function serialize(name, val, options) { |
| var opt = options || {}; |
| var enc = opt.encode || encode; |
| |
| if (typeof enc !== 'function') { |
| throw new TypeError('option encode is invalid'); |
| } |
| |
| if (!fieldContentRegExp.test(name)) { |
| throw new TypeError('argument name is invalid'); |
| } |
| |
| var value = enc(val); |
| |
| if (value && !fieldContentRegExp.test(value)) { |
| throw new TypeError('argument val is invalid'); |
| } |
| |
| var str = name + '=' + value; |
| |
| if (null != opt.maxAge) { |
| var maxAge = opt.maxAge - 0; |
| if (isNaN(maxAge)) throw new Error('maxAge should be a Number'); |
| str += '; Max-Age=' + Math.floor(maxAge); |
| } |
| |
| if (opt.domain) { |
| if (!fieldContentRegExp.test(opt.domain)) { |
| throw new TypeError('option domain is invalid'); |
| } |
| |
| str += '; Domain=' + opt.domain; |
| } |
| |
| if (opt.path) { |
| if (!fieldContentRegExp.test(opt.path)) { |
| throw new TypeError('option path is invalid'); |
| } |
| |
| str += '; Path=' + opt.path; |
| } |
| |
| if (opt.expires) { |
| if (typeof opt.expires.toUTCString !== 'function') { |
| throw new TypeError('option expires is invalid'); |
| } |
| |
| str += '; Expires=' + opt.expires.toUTCString(); |
| } |
| |
| if (opt.httpOnly) { |
| str += '; HttpOnly'; |
| } |
| |
| if (opt.secure) { |
| str += '; Secure'; |
| } |
| |
| if (opt.sameSite) { |
| var sameSite = typeof opt.sameSite === 'string' |
| ? opt.sameSite.toLowerCase() : opt.sameSite; |
| |
| switch (sameSite) { |
| case true: |
| str += '; SameSite=Strict'; |
| break; |
| case 'lax': |
| str += '; SameSite=Lax'; |
| break; |
| case 'strict': |
| str += '; SameSite=Strict'; |
| break; |
| default: |
| throw new TypeError('option sameSite is invalid'); |
| } |
| } |
| |
| return str; |
| } |
| |
| /** |
| * Try decoding a string using a decoding function. |
| * |
| * @param {string} str |
| * @param {function} decode |
| * @private |
| */ |
| |
| function tryDecode(str, decode) { |
| try { |
| return decode(str); |
| } catch (e) { |
| return str; |
| } |
| } |