;;;; Programmer: Kevin M. Rosenberg
;;;; Date Started: July 2003
;;;;
-;;;; $Id: sessions.lisp,v 1.2 2003/07/16 16:40:35 kevin Exp $
+;;;; $Id$
;;;;
;;;; This file and Wol are Copyright (c) 2003 by Kevin M. Rosenberg
;;;; *************************************************************************
(in-package #:wol)
-(defun make-new-session-id ()
- (random-string :length 24 :set :lower-alphanumeric))
-
-(defun ensure-websession (key req ent method)
- "Find or make websession for key"
+(defun find-websession (key ent)
(let ((sessions (sessions (session-master (entity-project ent)))))
- ;; if sessions doesn't exist, then project is not session enabled
- (when session
- (cond
- ((null key)
- (make-websession req ent method))
- (t
- (maphash
- (lambda (k v)
- (declare (ignore k))
- (when (equal key (websession-key v))
- (setf (websession-lastref v) (get-universal-time))
- (return-from ensure-websession v)))
- sessions)
- (make-websession req ent method))))))
+ (maphash
+ (lambda (k v)
+ (declare (ignore k))
+ (when (equal key (websession-key v))
+ (setf (websession-lastref v) (get-universal-time))
+ (return-from find-websession v)))
+ sessions)
+ nil))
+
+(defun is-session-enabled (ent)
+ (not (null (sessions (session-master (entity-project ent))))))
-(defun make-websession (req ent method)
- (let* ((key (random-string :length 24 :set :lower-alphanumeric))
+(defun make-websession (req ent)
+ (let* ((key (random-string :length +length-session-id+
+ :set :lower-alphanumeric))
(sess (make-instance 'websession
:key key
:lastref (get-universal-time)
:lifetime (lifetime (session-master (entity-project ent)))
- :method method))
+ :method :try-cookie))
(hash (sessions (session-master (entity-project ent)))))
(when hash
(setf (gethash key hash) sess)
(setf (websession-from-req req) sess)
sess)))
-(defun compute-session (req ent)
- (awhen (and (request-plist req)
- (getf (request-plist req) :session-id))
- (setf (websession-from-req req)
- (ensure-websession it req ent :uri))))
-
+(defun compute-session (req ent url-session-id)
+ (when (is-session-enabled ent)
+ (let* ((cookie-session-id (cookie-session-key ent (request-cookies req)))
+ (session-id (or url-session-id cookie-session-id))
+ (found-session (when session-id
+ (find-websession session-id ent)))
+ (session (aif found-session
+ it
+ (make-websession req ent))))
+ (cond
+ (cookie-session-id
+ (setf (websession-method session) :cookies))
+ (url-session-id
+ (setf (websession-method session) :url)))
+ (setf (websession-from-req req) session))))
+
;;; Reap expired sessions
collect s))
(defun all-sessions (&aux s)
- (dolist (p *active-projects* s)
- (let ((sm (session-master p))
- (sessions (when sm (sessions sm))))
- (when sessions
- (maphash
- (lambda (k v)
- (declare (ignore k))
- (push (cons v p) s))
- sessions)))))
+ (maphash
+ (lambda (name proj)
+ (declare (ignore name))
+ (let* ((sm (session-master proj))
+ (sessions (when sm (sessions sm))))
+ (when sessions
+ (maphash
+ (lambda (k v)
+ (declare (ignore k))
+ (push (cons v proj) s))
+ sessions))))
+ *active-projects*)
+ s)
(defmethod flush-expired (s)
(let ((sessions (sessions (session-master (cdr s)))))
(remhash (car s) sessions)
- (add-log-entry (cdr s) "flush expired session: key=~A" (websession-key (car s)))))
+ (add-log-entry (cdr s) "flush expired session: key=~A"
+ (websession-key (car s)))))
(defun is-session-expired (ws)
(> (get-universal-time) (+ (websession-lastref ws)
(websession-lifetime ws))))
+
+(defun is-raw-session-id (str)
+ (and (stringp str)
+ (> (length str) 2)
+ (char= #\~ (schar str 0) (schar str (1- (length str))))))
+
+(defun raw-session-id->session-id (str)
+ (subseq str 1 (1- (length str))))