| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202 | /*! * cookie * Copyright(c) 2012-2014 Roman Shtylman * Copyright(c) 2015 Douglas Christopher Wilson * MIT Licensed */'use strict';/** * Module exports. * @public */exports.parse = parse;exports.serialize = serialize;/** * Module variables. * @private */var decode = decodeURIComponent;var encode = encodeURIComponent;/** * RegExp to match field-content in RFC 7230 sec 3.2 * * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ] * field-vchar   = VCHAR / obs-text * obs-text      = %x80-FF */var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/;/** * Parse a cookie header. * * Parse the given cookie header string into an object * The object has the various cookies as keys(names) => values * * @param {string} str * @param {object} [options] * @return {object} * @public */function parse(str, options) {  if (typeof str !== 'string') {    throw new TypeError('argument str must be a string');  }  var obj = {}  var opt = options || {};  var pairs = str.split(';')  var dec = opt.decode || decode;  for (var i = 0; i < pairs.length; i++) {    var pair = pairs[i];    var index = pair.indexOf('=')    // skip things that don't look like key=value    if (index < 0) {      continue;    }    var key = pair.substring(0, index).trim()    // only assign once    if (undefined == obj[key]) {      var val = pair.substring(index + 1, pair.length).trim()      // quoted values      if (val[0] === '"') {        val = val.slice(1, -1)      }      obj[key] = tryDecode(val, dec);    }  }  return obj;}/** * Serialize data into a cookie header. * * Serialize the a name value pair into a cookie string suitable for * http headers. An optional options object specified cookie parameters. * * serialize('foo', 'bar', { httpOnly: true }) *   => "foo=bar; httpOnly" * * @param {string} name * @param {string} val * @param {object} [options] * @return {string} * @public */function serialize(name, val, options) {  var opt = options || {};  var enc = opt.encode || encode;  if (typeof enc !== 'function') {    throw new TypeError('option encode is invalid');  }  if (!fieldContentRegExp.test(name)) {    throw new TypeError('argument name is invalid');  }  var value = enc(val);  if (value && !fieldContentRegExp.test(value)) {    throw new TypeError('argument val is invalid');  }  var str = name + '=' + value;  if (null != opt.maxAge) {    var maxAge = opt.maxAge - 0;    if (isNaN(maxAge) || !isFinite(maxAge)) {      throw new TypeError('option maxAge is invalid')    }    str += '; Max-Age=' + Math.floor(maxAge);  }  if (opt.domain) {    if (!fieldContentRegExp.test(opt.domain)) {      throw new TypeError('option domain is invalid');    }    str += '; Domain=' + opt.domain;  }  if (opt.path) {    if (!fieldContentRegExp.test(opt.path)) {      throw new TypeError('option path is invalid');    }    str += '; Path=' + opt.path;  }  if (opt.expires) {    if (typeof opt.expires.toUTCString !== 'function') {      throw new TypeError('option expires is invalid');    }    str += '; Expires=' + opt.expires.toUTCString();  }  if (opt.httpOnly) {    str += '; HttpOnly';  }  if (opt.secure) {    str += '; Secure';  }  if (opt.sameSite) {    var sameSite = typeof opt.sameSite === 'string'      ? opt.sameSite.toLowerCase() : opt.sameSite;    switch (sameSite) {      case true:        str += '; SameSite=Strict';        break;      case 'lax':        str += '; SameSite=Lax';        break;      case 'strict':        str += '; SameSite=Strict';        break;      case 'none':        str += '; SameSite=None';        break;      default:        throw new TypeError('option sameSite is invalid');    }  }  return str;}/** * Try decoding a string using a decoding function. * * @param {string} str * @param {function} decode * @private */function tryDecode(str, decode) {  try {    return decode(str);  } catch (e) {    return str;  }}
 |