You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by ir...@apache.org on 2016/01/14 03:20:22 UTC

[1/2] cxf git commit: cxf-6729 provide cookie version1 support

Repository: cxf
Updated Branches:
  refs/heads/master bc948f0ac -> f17f92319


cxf-6729 provide cookie version1 support


Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/543644a3
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/543644a3
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/543644a3

Branch: refs/heads/master
Commit: 543644a3404db8a3a556586109653ac478474658
Parents: fa0eea8
Author: irisding <ir...@apache.org>
Authored: Wed Jan 13 17:22:47 2016 +0800
Committer: irisding <ir...@apache.org>
Committed: Wed Jan 13 17:22:47 2016 +0800

----------------------------------------------------------------------
 .../cxf/jaxrs/impl/NewCookieHeaderProvider.java | 74 ++++++++++++++++++--
 .../jaxrs/impl/NewCookieHeaderProviderTest.java | 24 ++++++-
 2 files changed, 91 insertions(+), 7 deletions(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/cxf/blob/543644a3/rt/frontend/jaxrs/src/main/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProvider.java
----------------------------------------------------------------------
diff --git a/rt/frontend/jaxrs/src/main/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProvider.java b/rt/frontend/jaxrs/src/main/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProvider.java
index 15ba505..5a5a472 100644
--- a/rt/frontend/jaxrs/src/main/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProvider.java
+++ b/rt/frontend/jaxrs/src/main/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProvider.java
@@ -37,6 +37,9 @@ public class NewCookieHeaderProvider implements HeaderDelegate<NewCookie> {
     private static final String SECURE = "Secure";
     private static final String EXPIRES = "Expires";
     private static final String HTTP_ONLY = "HttpOnly";
+    
+    /** from RFC 2068, token special case characters */
+    private static final String TSPECIALS = "\"()<>@,;:\\/[]?={} \t";
         
     public NewCookie fromString(String c) {
         
@@ -63,6 +66,9 @@ public class NewCookieHeaderProvider implements HeaderDelegate<NewCookie> {
             String paramName = sepIndex != -1 ? theToken.substring(0, sepIndex) : theToken;
             String paramValue = sepIndex == -1 || sepIndex == theToken.length() - 1 
                 ? null : theToken.substring(sepIndex + 1);
+            if (paramValue != null && paramValue.startsWith("\"")) {
+                paramValue = paramValue.substring(1, paramValue.length() - 1);
+            }
             
             if (paramName.equalsIgnoreCase(MAX_AGE)) {
                 maxAge = Integer.parseInt(paramValue);
@@ -92,21 +98,27 @@ public class NewCookieHeaderProvider implements HeaderDelegate<NewCookie> {
         
         return new NewCookie(name, value, path, domain, version, comment, maxAge, expires, isSecure, httpOnly);
     }
-
+    
+    @Override
     public String toString(NewCookie value) {
+
+        if (null == value) {
+            throw new NullPointerException("Null cookie input");
+        }
+
         StringBuilder sb = new StringBuilder();
-        sb.append(value.getName()).append('=').append(value.getValue());
+        sb.append(value.getName()).append('=').append(maybeQuote(value.getValue()));
         if (value.getComment() != null) {
-            sb.append(';').append(COMMENT).append('=').append(value.getComment());
+            sb.append(';').append(COMMENT).append('=').append(maybeQuote(value.getComment()));
         }
         if (value.getDomain() != null) {
-            sb.append(';').append(DOMAIN).append('=').append(value.getDomain());
+            sb.append(';').append(DOMAIN).append('=').append(maybeQuote(value.getDomain()));
         }
         if (value.getMaxAge() != -1) {
             sb.append(';').append(MAX_AGE).append('=').append(value.getMaxAge());
         }
         if (value.getPath() != null) {
-            sb.append(';').append(PATH).append('=').append(value.getPath());
+            sb.append(';').append(PATH).append('=').append(maybeQuote(value.getPath()));
         }
         if (value.getExpiry() != null) {
             sb.append(';').append(EXPIRES).append('=').append(HttpUtils.toHttpDate(value.getExpiry()));
@@ -119,6 +131,58 @@ public class NewCookieHeaderProvider implements HeaderDelegate<NewCookie> {
         }
         sb.append(';').append(VERSION).append('=').append(value.getVersion());
         return sb.toString();
+
+    }
+
+    /**
+     * Append the input value string to the given buffer, wrapping it with
+     * quotes if need be.
+     * 
+     * @param value
+     * @return String
+     */
+    private static String maybeQuote(String value) {
+        
+        StringBuilder buff = new StringBuilder();
+        // handle a null value as well as an empty one, attr=
+        if (null == value || 0 == value.length()) {
+            buff.append("");
+        } else if (needsQuote(value)) {
+            buff.append('"');
+            buff.append(value);
+            buff.append('"');
+        } else {
+            buff.append(value);
+        }
+        return buff.toString();
     }
 
+    /**
+     * Return true iff the string contains special characters that need to be
+     * quoted.
+     * 
+     * @param value
+     * @return boolean
+     */
+    private static boolean needsQuote(String value) {
+        if (null == value) {
+            return true;
+        }
+        int len = value.length();
+        if (0 == len) {
+            return true;
+        }
+        if ('"' == value.charAt(0) & '"' == value.charAt(len - 1)) {
+            // already wrapped with quotes
+            return false;         
+        } 
+
+        for (int i = 0; i < len; i++) {
+            char c = value.charAt(i);
+            if (c < 0x20 || c >= 0x7f || TSPECIALS.indexOf(c) != -1) {
+                return true;
+            }
+        }
+        return false;
+    }
 }

http://git-wip-us.apache.org/repos/asf/cxf/blob/543644a3/rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProviderTest.java
----------------------------------------------------------------------
diff --git a/rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProviderTest.java b/rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProviderTest.java
index 5f54f24..f04aac6 100644
--- a/rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProviderTest.java
+++ b/rt/frontend/jaxrs/src/test/java/org/apache/cxf/jaxrs/impl/NewCookieHeaderProviderTest.java
@@ -110,11 +110,31 @@ public class NewCookieHeaderProviderTest extends Assert {
     }
     
     @Test
+    public void testFromStringWithSpecialChar() {
+        NewCookie c = NewCookie.valueOf(
+                      "foo=\"bar (space)<>[]\"; Comment=\"comment@comment:,\"; Path=\"/path?path\"; Max-Age=10; "
+                      + "Domain=\"domain.com\"; Secure; Version=1");
+        assertTrue("bar (space)<>[]".equals(c.getValue())
+                   && "foo".equals(c.getName())
+                   && 1 == c.getVersion()
+                   && "/path?path".equals(c.getPath())
+                   && "domain.com".equals(c.getDomain())
+                   && "comment@comment:,".equals(c.getComment())
+                   && 10 == c.getMaxAge());
+    }
+    
+    @Test
     public void testToString() {
         NewCookie c = new NewCookie("foo", "bar", "path", "domain", "comment", 2, true);
         assertEquals("foo=bar;Comment=comment;Domain=domain;Max-Age=2;Path=path;Secure;Version=1", 
-                     c.toString());
-               
+                     c.toString());               
+    }
+    
+    @Test
+    public void testToStringWithSpecialChar() {
+        NewCookie c = new NewCookie("foo", "bar (space)<>[]", "/path?path", "domain.com", "comment@comment:,", 2, true);
+        assertEquals("foo=\"bar (space)<>[]\";Comment=\"comment@comment:,\";Domain=domain.com;Max-Age=2;"
+                     + "Path=\"/path?path\";Secure;Version=1", c.toString());
     }
     
 }


[2/2] cxf git commit: Merge branch 'master' of https://git-wip-us.apache.org/repos/asf/cxf

Posted by ir...@apache.org.
Merge branch 'master' of https://git-wip-us.apache.org/repos/asf/cxf


Project: http://git-wip-us.apache.org/repos/asf/cxf/repo
Commit: http://git-wip-us.apache.org/repos/asf/cxf/commit/f17f9231
Tree: http://git-wip-us.apache.org/repos/asf/cxf/tree/f17f9231
Diff: http://git-wip-us.apache.org/repos/asf/cxf/diff/f17f9231

Branch: refs/heads/master
Commit: f17f923192cee7d734b872aa69fc7332bff0aa25
Parents: 543644a bc948f0
Author: irisding <ir...@apache.org>
Authored: Thu Jan 14 10:16:37 2016 +0800
Committer: irisding <ir...@apache.org>
Committed: Thu Jan 14 10:16:37 2016 +0800

----------------------------------------------------------------------
 parent/pom.xml                                        |  7 ++++++-
 .../main/java/org/apache/cxf/jaxrs/JAXRSInvoker.java  |  2 +-
 .../grants/code/DefaultEHCacheCodeDataProvider.java   |  2 +-
 .../provider/DefaultEHCacheOAuthDataProvider.java     |  4 ++--
 .../KerberosTokenInterceptorProvider.java             |  2 +-
 .../policy/interceptors/NegotiationUtils.java         |  2 +-
 .../ws/security/wss4j/StaxActionInInterceptor.java    | 12 ++++++------
 .../ws/security/wss4j/StaxCryptoCoverageChecker.java  |  8 ++++----
 .../wss4j/StaxSecurityContextInInterceptor.java       | 14 +++++++-------
 .../cxf/ws/security/wss4j/WSS4JStaxInInterceptor.java |  2 +-
 .../ws/security/wss4j/WSS4JStaxOutInterceptor.java    |  2 +-
 .../policyhandlers/StaxSymmetricBindingHandler.java   | 12 ++++++------
 .../apache/cxf/sts/operation/TokenIssueOperation.java |  2 +-
 .../apache/cxf/sts/token/canceller/SCTCanceller.java  |  2 +-
 .../cxf/sts/token/provider/TokenProviderUtils.java    |  2 +-
 systests/jaxrs/pom.xml                                |  4 ++++
 .../systest/jaxrs/JAXRSContinuationsServlet3Test.java |  1 -
 17 files changed, 44 insertions(+), 36 deletions(-)
----------------------------------------------------------------------