cppcms/session_interface.h

//                                                                             
//  Copyright (C) 2008-2012  Artyom Beilis (Tonkikh) <artyomtnk@yahoo.com>     
//                                                                             
//  See accompanying file COPYING.TXT file for licensing details.
//
#ifndef CPPCMS_SESSION_INTERFACE_H
#define CPPCMS_SESSION_INTERFACE_H

#include <cppcms/defs.h>
#include <booster/noncopyable.h>
#include <booster/hold_ptr.h>
#include <booster/shared_ptr.h>
#include <cppcms/cstdint.h>
#include <cppcms/cppcms_error.h>
#include <cppcms/serialization_classes.h>
#include <string>
#include <map>
#include <memory>
#include <sstream>
#include <typeinfo>

namespace cppcms {
namespace http {
        class context;
        class request;
        class response;
}

class session_api;

class CPPCMS_API request_forgery_error : public cppcms_error {
public:
        request_forgery_error() : 
                cppcms_error("Cross site request forgery detected")
        {
        }
};

class CPPCMS_API session_interface : private booster::noncopyable {
public:

        session_interface(http::context &);
        ~session_interface();

        bool is_set(std::string const &key);
        void erase(std::string const &key);
        void clear();

        bool is_exposed(std::string const &key);
        void expose(std::string const &key,bool val=true);
        void hide(std::string const &key);

        std::string &operator[](std::string const &key);
        void set(std::string const &key,std::string const &v);

        std::string get(std::string const &key);
        
        std::string get(std::string const &key,std::string const &default_value);

        template<typename T>
        T get(std::string const &key)
        {
                std::istringstream ss(get(key));
                ss.imbue(std::locale::classic());
                T value;
                ss>>value;
                if(ss.fail() || !ss.eof())
                        throw std::bad_cast();
                return value;
        }

        template<typename T>
        void set(std::string const &key,T const &value)
        {
                std::ostringstream ss;
                ss.imbue(std::locale::classic());
                ss<<value;
                set(key,ss.str());
        }

        template<typename Serializable>
        void store_data(std::string const &key,Serializable const &object)
        {
                std::string buffer;
                serialization_traits<Serializable>::save(object,buffer);
                set(key,buffer);
        }

        template<typename Serializable>
        void fetch_data(std::string const &key,Serializable &object)
        {
                std::string buffer=get(key);
                serialization_traits<Serializable>::load(buffer,object);
        }
        
        enum {
                fixed,  
                renew,  

                browser 

        };

        int age();
        void age(int t);
        void default_age();

        int expiration();
        void expiration(int h);
        void default_expiration();

        void on_server(bool srv);

        bool on_server();


        void set_session_cookie(std::string const &data);
        void clear_session_cookie();

        std::string get_session_cookie();

        bool load();

        void save();

        bool is_blocking();

        void reset_session();


        bool validate_csrf_token(std::string const &str);
        void validate_request_origin();

        void request_origin_validation_is_required(bool required);

        std::string get_csrf_token();
        std::string get_csrf_token_cookie_name();

private:
        friend class http::response;
        friend class http::request;



        struct entry;

        typedef std::map<std::string,entry> data_type;
        data_type data_,data_copy_;
        http::context *context_;

        // Cached defaults
        int timeout_val_def_;
        int how_def_;

        // User Values
        int timeout_val_;
        int how_;

        // Information from session data
        time_t timeout_in_;

        uint32_t new_session_ : 1;
        uint32_t saved_ : 1;
        uint32_t on_server_ : 1;
        uint32_t loaded_ : 1;
        uint32_t reset_ : 1;
        uint32_t csrf_checked_ : 1;
        uint32_t csrf_do_validation_ : 1;
        uint32_t csrf_validation_ : 1;
        uint32_t reserved_ : 24;

        std::string temp_cookie_;

        // storage itself
        
        booster::shared_ptr<session_api> storage_;
        struct _data;
        booster::hold_ptr<_data> d; // for future use

        int cookie_age();
        time_t   session_age();

        void check();
        void update_exposed(bool); 


        void set_session_cookie(int64_t age,std::string const &data,std::string const &key=std::string());

        void save_data(std::map<std::string,entry> const &data,std::string &s);
        void load_data(std::map<std::string,entry> &data,std::string const &s);
        std::string generate_csrf_token();
};

} // cppcms


#endif