Java Cookie.setHttpOnly方法代码示例

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
@Override
protected void doFilterInternal(HttpServletRequest request, HttpServletResponse response, FilterChain filterChain) throws ServletException, IOException {
    // Spring put the CSRF token in session attribute "_csrf"
    CsrfToken csrfToken = (CsrfToken) request.getAttribute("_csrf");

    // Send the cookie only if the token has changed
    String actualToken = request.getHeader("X-CSRF-TOKEN");
    if (actualToken == null || !actualToken.equals(csrfToken.getToken())) {
        // Session cookie that will be used by AngularJS
        String pCookieName = "CSRF-TOKEN";
        Cookie cookie = new Cookie(pCookieName, csrfToken.getToken());
        cookie.setMaxAge(-1);
        cookie.setHttpOnly(false);
        cookie.setPath("/");
        response.addCookie(cookie);
    }
    filterChain.doFilter(request, response);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
private Cookie createCookie(
        String sessionCookieName,
        String value) {
    Cookie cookie = new Cookie(sessionCookieName, value);
    cookie.setPath(getServletContext().getContextPath() + "/");
    if (applicationCookieDomain != null && !applicationCookieDomain.isEmpty()) {
        cookie.setDomain(applicationCookieDomain);
    }
    if (sessionTransferredOverHttpsOnly != null) {
        cookie.setSecure(sessionTransferredOverHttpsOnly);
    }
    if (sessionHttpOnly != null) {
        cookie.setHttpOnly(sessionHttpOnly);
    }
    return cookie;
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
/**
 * Adds the cookie, taking into account {@link RememberMeCredential#REQUEST_PARAMETER_REMEMBER_ME}
 * in the request.
 *
 * @param request the request
 * @param response the response
 * @param cookieValue the cookie value
 */
public void addCookie(final HttpServletRequest request, final HttpServletResponse response, final String cookieValue) {
    final String theCookieValue = this.casCookieValueManager.buildCookieValue(cookieValue, request);

    if (!StringUtils.hasText(request.getParameter(RememberMeCredential.REQUEST_PARAMETER_REMEMBER_ME))) {
        super.addCookie(response, theCookieValue);
    } else {
        final Cookie cookie = createCookie(theCookieValue);
        cookie.setMaxAge(this.rememberMeMaxAge);
        if (isCookieSecure()) {
            cookie.setSecure(true);
        }
        if (isCookieHttpOnly()) {
            final Method setHttpOnlyMethod = ReflectionUtils.findMethod(Cookie.class, "setHttpOnly", boolean.class);
            if(setHttpOnlyMethod != null) {
                cookie.setHttpOnly(true);
            } else {
                logger.debug("Cookie cannot be marked as HttpOnly; container is not using servlet 3.0.");
            }
        }
        response.addCookie(cookie);
    }
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
private void removeCookie(J2EContext context) {
	Cookie cookie = new Cookie(ticketGrantingTicketCookieGenerator.getCookieName(), null); // Not necessary, but saves bandwidth.
	cookie.setPath(ticketGrantingTicketCookieGenerator.getCookiePath());
	cookie.setHttpOnly(true);
	cookie.setSecure(true);
	cookie.setMaxAge(0);
	context.getResponse().addCookie(cookie);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
/**
 * Add a cookie with the given value to the response,
 * using the cookie descriptor settings of this generator.
 * <p>Delegates to {@link #createCookie} for cookie creation.
 * @param response the HTTP response to add the cookie to
 * @param cookieValue the value of the cookie to add
 * @see #setCookieName
 * @see #setCookieDomain
 * @see #setCookiePath
 * @see #setCookieMaxAge
 */
public void addCookie(HttpServletResponse response, String cookieValue) {
	Assert.notNull(response, "HttpServletResponse must not be null");
	Cookie cookie = createCookie(cookieValue);
	Integer maxAge = getCookieMaxAge();
	if (maxAge != null) {
		cookie.setMaxAge(maxAge);
	}
	if (isCookieSecure()) {
		cookie.setSecure(true);
	}
	if (isCookieHttpOnly()) {
		cookie.setHttpOnly(true);
	}
	response.addCookie(cookie);
	if (logger.isDebugEnabled()) {
		logger.debug("Added cookie with name [" + getCookieName() + "] and value [" + cookieValue + "]");
	}
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
@Override
public void onAuthenticationSuccess(HttpServletRequest request, HttpServletResponse response,
		Authentication authentication ) throws IOException, ServletException {
	clearAuthenticationAttributes(request);
	User user = (User)authentication.getPrincipal();

	String jws = tokenHelper.generateToken( user.getUsername() );

       // Create token auth Cookie
       Cookie authCookie = new Cookie( TOKEN_COOKIE, ( jws ) );

	authCookie.setHttpOnly( true );

	authCookie.setMaxAge( EXPIRES_IN );

	authCookie.setPath( "/" );
	// Add cookie to response
	response.addCookie( authCookie );

	// JWT is also in the response
	UserTokenState userTokenState = new UserTokenState(jws, EXPIRES_IN);
	String jwtResponse = objectMapper.writeValueAsString( userTokenState );
	response.setContentType("application/json");
	response.getWriter().write( jwtResponse );

}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
void safeCookie4() {
    boolean safe = true;
    Cookie cookie = new Cookie("test1","1234");
    cookie.setHttpOnly(false);
    cookie.setSecure(safe);
    cookie.setHttpOnly(false);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
public static void clear(HttpServletResponse httpServletResponse, String name) {
    Cookie cookie = new Cookie(name, null);
    cookie.setPath("/");
    cookie.setHttpOnly(true);
    cookie.setMaxAge(0);
    cookie.setDomain("localhost");
    httpServletResponse.addCookie(cookie);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
@RequestMapping("/")
public String index( Model model, HttpServletResponse response) {
	
	Cookie cookie = new Cookie("jwtk", "011001110202423424214234");
	cookie.setHttpOnly(true);
	response.addCookie(cookie);
	
	List<JwtkMessage> msg = jwtkMessageRepository.findAllByOrderByDateDesc();
	model.addAttribute("msg", msg);
	
	return INDEX_PAGE;
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
/**
 * Sets a cookie.
 * @param name the name
 * @param value the value
 * @param req HTTP request
 * @param res HTTP response
 * @param httpOnly HTTP only flag
 * @param maxAge max age
 */
public static void setRawCookie(String name, String value, HttpServletRequest req,
		HttpServletResponse res, boolean httpOnly, int maxAge) {
	if (StringUtils.isBlank(name) || value == null || req == null || res == null) {
		return;
	}
	Cookie cookie = new Cookie(name, value);
	cookie.setHttpOnly(httpOnly);
	cookie.setMaxAge(maxAge < 0 ? Config.SESSION_TIMEOUT_SEC : maxAge);
	cookie.setPath("/");
	cookie.setSecure(req.isSecure());
	res.addCookie(cookie);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
void unsafeCookie4() {
    boolean unsafe = false;
    Cookie newCookie = new Cookie("test1","1234");
    newCookie.setHttpOnly(unsafe);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
void safeCookie2() {
    Cookie cookie = new Cookie("test1","1234");
    cookie.setHttpOnly(CONST_TRUE);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
void unsafeCookie2() {
    Cookie newCookie = new Cookie("test1","1234");
    newCookie.setHttpOnly(CONST_FALSE);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
void unsafeCookie1() {
    Cookie newCookie = new Cookie("test1","1234");
    newCookie.setHttpOnly(false);
}
 

import javax.servlet.http.Cookie; //导入方法依赖的package包/类
public static void put(HttpServletResponse response, String key, String value) {
	Cookie cookie = new Cookie(key, value);
	cookie.setPath("/");
	cookie.setHttpOnly(true);
	response.addCookie(cookie);
}