pax_global_header00006660000000000000000000000064136477337110014526gustar00rootroot0000000000000052 comment=b22458dd9f7ca94705fd7ee25780836601b913aa cookie-0.4.1/000077500000000000000000000000001364773371100130015ustar00rootroot00000000000000cookie-0.4.1/.editorconfig000066400000000000000000000002631364773371100154570ustar00rootroot00000000000000# http://editorconfig.org root = true [*] charset = utf-8 insert_final_newline = true trim_trailing_whitespace = true [{*.js,*.json,*.yml}] indent_size = 2 indent_style = space cookie-0.4.1/.eslintignore000066400000000000000000000000261364773371100155020ustar00rootroot00000000000000coverage node_modules cookie-0.4.1/.eslintrc.yml000066400000000000000000000001411364773371100154210ustar00rootroot00000000000000rules: eol-last: error indent: ["error", 2, { "SwitchCase": 1 }] no-trailing-spaces: error cookie-0.4.1/.gitignore000066400000000000000000000001051364773371100147650ustar00rootroot00000000000000.nyc_output/ coverage/ node_modules/ npm-debug.log package-lock.json cookie-0.4.1/.travis.yml000066400000000000000000000063121364773371100151140ustar00rootroot00000000000000language: node_js node_js: - "0.6" - "0.8" - "0.10" - "0.12" - "1.8" - "2.5" - "3.3" - "4.9" - "5.12" - "6.17" - "7.10" - "8.17" - "9.11" - "10.20" - "11.15" - "12.16" - "13.13" dist: trusty env: global: # Suppress Node.js 0.6 compile warnings - "CXXCOM='$CXX -o $TARGET -c $CXXFLAGS $CCFLAGS -Wno-unused-local-typedefs -Wno-maybe-uninitialized -Wno-narrowing -Wno-strict-overflow $_CCCOMCOM $SOURCES'" cache: directories: - node_modules before_install: - | # Setup utility functions function node_version_lt () { [[ "$(v "$TRAVIS_NODE_VERSION")" -lt "$(v "${1}")" ]] } function npm_module_installed () { npm -lsp ls | grep -Fq "$(pwd)/node_modules/${1}:${1}@" } function npm_remove_module_re () { node -e ' fs = require("fs"); p = JSON.parse(fs.readFileSync("package.json", "utf8")); r = RegExp(process.argv[1]); for (k in p.devDependencies) { if (r.test(k)) delete p.devDependencies[k]; } fs.writeFileSync("package.json", JSON.stringify(p, null, 2) + "\n"); ' "$@" } function npm_use_module () { node -e ' fs = require("fs"); p = JSON.parse(fs.readFileSync("package.json", "utf8")); p.devDependencies[process.argv[1]] = process.argv[2]; fs.writeFileSync("package.json", JSON.stringify(p, null, 2) + "\n"); ' "$@" } function v () { tr '.' '\n' <<< "${1}" \ | awk '{ printf "%03d", $0 }' \ | sed 's/^0*//' } # Configure npm - | # Skip updating shrinkwrap / lock npm config set shrinkwrap false - | # Remove benchmark dependencies npm_remove_module_re '(^|-)benchmark$' # Setup Node.js version-specific dependencies - | # Configure eslint for linting if node_version_lt '8.0'; then npm_remove_module_re '^eslint(-|$)' fi - | # Configure mocha for testing if node_version_lt '0.8' ; then npm_use_module 'mocha' '1.21.5' elif node_version_lt '0.10'; then npm_use_module 'mocha' '2.5.3' elif node_version_lt '4.0' ; then npm_use_module 'mocha' '3.5.3' elif node_version_lt '6.0' ; then npm_use_module 'mocha' '5.2.0' elif node_version_lt '8.0' ; then npm_use_module 'mocha' '6.2.2' fi - | # Configure nyc for testing if node_version_lt '0.10'; then npm_remove_module_re '^nyc$' elif node_version_lt '4.0' ; then npm_use_module 'nyc' '10.3.2' elif node_version_lt '6.0' ; then npm_use_module 'nyc' '11.9.0' elif node_version_lt '8.0' ; then npm_use_module 'nyc' '14.1.1' fi # Update Node.js modules - | # Prune & rebuild node_modules if [[ -d node_modules ]]; then npm prune npm rebuild fi before_script: - | # Contents of node_modules npm -s ls ||: script: - | # Run test script, depending on nyc install if npm_module_installed 'nyc'; then npm run-script test-ci else npm test fi - | # Run linting, if eslint exists if npm_module_installed 'eslint'; then npm run-script lint fi after_script: - | # Upload coverage to coveralls if [[ -d .nyc_output ]]; then npm install --save-dev coveralls@2 nyc report --reporter=text-lcov | coveralls fi cookie-0.4.1/HISTORY.md000066400000000000000000000053431364773371100144710ustar00rootroot000000000000000.4.1 / 2020-04-21 ================== * Fix `maxAge` option to reject invalid values 0.4.0 / 2019-05-15 ================== * Add `SameSite=None` support 0.3.1 / 2016-05-26 ================== * Fix `sameSite: true` to work with draft-7 clients - `true` now sends `SameSite=Strict` instead of `SameSite` 0.3.0 / 2016-05-26 ================== * Add `sameSite` option - Replaces `firstPartyOnly` option, never implemented by browsers * Improve error message when `encode` is not a function * Improve error message when `expires` is not a `Date` 0.2.4 / 2016-05-20 ================== * perf: enable strict mode * perf: use for loop in parse * perf: use string concatination for serialization 0.2.3 / 2015-10-25 ================== * Fix cookie `Max-Age` to never be a floating point number 0.2.2 / 2015-09-17 ================== * Fix regression when setting empty cookie value - Ease the new restriction, which is just basic header-level validation * Fix typo in invalid value errors 0.2.1 / 2015-09-17 ================== * Throw on invalid values provided to `serialize` - Ensures the resulting string is a valid HTTP header value 0.2.0 / 2015-08-13 ================== * Add `firstPartyOnly` option * Throw better error for invalid argument to parse * perf: hoist regular expression 0.1.5 / 2015-09-17 ================== * Fix regression when setting empty cookie value - Ease the new restriction, which is just basic header-level validation * Fix typo in invalid value errors 0.1.4 / 2015-09-17 ================== * Throw better error for invalid argument to parse * Throw on invalid values provided to `serialize` - Ensures the resulting string is a valid HTTP header value 0.1.3 / 2015-05-19 ================== * Reduce the scope of try-catch deopt * Remove argument reassignments 0.1.2 / 2014-04-16 ================== * Remove unnecessary files from npm package 0.1.1 / 2014-02-23 ================== * Fix bad parse when cookie value contained a comma * Fix support for `maxAge` of `0` 0.1.0 / 2013-05-01 ================== * Add `decode` option * Add `encode` option 0.0.6 / 2013-04-08 ================== * Ignore cookie parts missing `=` 0.0.5 / 2012-10-29 ================== * Return raw cookie value if value unescape errors 0.0.4 / 2012-06-21 ================== * Use encode/decodeURIComponent for cookie encoding/decoding - Improve server/client interoperability 0.0.3 / 2012-06-06 ================== * Only escape special characters per the cookie RFC 0.0.2 / 2012-06-01 ================== * Fix `maxAge` option to not throw error 0.0.1 / 2012-05-28 ================== * Add more tests 0.0.0 / 2012-05-28 ================== * Initial release cookie-0.4.1/LICENSE000066400000000000000000000022271364773371100140110ustar00rootroot00000000000000(The MIT License) Copyright (c) 2012-2014 Roman Shtylman Copyright (c) 2015 Douglas Christopher Wilson Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. cookie-0.4.1/README.md000066400000000000000000000215331364773371100142640ustar00rootroot00000000000000# cookie [![NPM Version][npm-version-image]][npm-url] [![NPM Downloads][npm-downloads-image]][npm-url] [![Node.js Version][node-version-image]][node-version-url] [![Build Status][travis-image]][travis-url] [![Test Coverage][coveralls-image]][coveralls-url] Basic HTTP cookie parser and serializer for HTTP servers. ## Installation This is a [Node.js](https://nodejs.org/en/) module available through the [npm registry](https://www.npmjs.com/). Installation is done using the [`npm install` command](https://docs.npmjs.com/getting-started/installing-npm-packages-locally): ```sh $ npm install cookie ``` ## API ```js var cookie = require('cookie'); ``` ### cookie.parse(str, options) Parse an HTTP `Cookie` header string and returning an object of all cookie name-value pairs. The `str` argument is the string representing a `Cookie` header value and `options` is an optional object containing additional parsing options. ```js var cookies = cookie.parse('foo=bar; equation=E%3Dmc%5E2'); // { foo: 'bar', equation: 'E=mc^2' } ``` #### Options `cookie.parse` accepts these properties in the options object. ##### decode Specifies a function that will be used to decode a cookie's value. Since the value of a cookie has a limited character set (and must be a simple string), this function can be used to decode a previously-encoded cookie value into a JavaScript string or other object. The default function is the global `decodeURIComponent`, which will decode any URL-encoded sequences into their byte representations. **note** if an error is thrown from this function, the original, non-decoded cookie value will be returned as the cookie's value. ### cookie.serialize(name, value, options) Serialize a cookie name-value pair into a `Set-Cookie` header string. The `name` argument is the name for the cookie, the `value` argument is the value to set the cookie to, and the `options` argument is an optional object containing additional serialization options. ```js var setCookie = cookie.serialize('foo', 'bar'); // foo=bar ``` #### Options `cookie.serialize` accepts these properties in the options object. ##### domain Specifies the value for the [`Domain` `Set-Cookie` attribute][rfc-6265-5.2.3]. By default, no domain is set, and most clients will consider the cookie to apply to only the current domain. ##### encode Specifies a function that will be used to encode a cookie's value. Since value of a cookie has a limited character set (and must be a simple string), this function can be used to encode a value into a string suited for a cookie's value. The default function is the global `encodeURIComponent`, which will encode a JavaScript string into UTF-8 byte sequences and then URL-encode any that fall outside of the cookie range. ##### expires Specifies the `Date` object to be the value for the [`Expires` `Set-Cookie` attribute][rfc-6265-5.2.1]. By default, no expiration is set, and most clients will consider this a "non-persistent cookie" and will delete it on a condition like exiting a web browser application. **note** the [cookie storage model specification][rfc-6265-5.3] states that if both `expires` and `maxAge` are set, then `maxAge` takes precedence, but it is possible not all clients by obey this, so if both are set, they should point to the same date and time. ##### httpOnly Specifies the `boolean` value for the [`HttpOnly` `Set-Cookie` attribute][rfc-6265-5.2.6]. When truthy, the `HttpOnly` attribute is set, otherwise it is not. By default, the `HttpOnly` attribute is not set. **note** be careful when setting this to `true`, as compliant clients will not allow client-side JavaScript to see the cookie in `document.cookie`. ##### maxAge Specifies the `number` (in seconds) to be the value for the [`Max-Age` `Set-Cookie` attribute][rfc-6265-5.2.2]. The given number will be converted to an integer by rounding down. By default, no maximum age is set. **note** the [cookie storage model specification][rfc-6265-5.3] states that if both `expires` and `maxAge` are set, then `maxAge` takes precedence, but it is possible not all clients by obey this, so if both are set, they should point to the same date and time. ##### path Specifies the value for the [`Path` `Set-Cookie` attribute][rfc-6265-5.2.4]. By default, the path is considered the ["default path"][rfc-6265-5.1.4]. ##### sameSite Specifies the `boolean` or `string` to be the value for the [`SameSite` `Set-Cookie` attribute][rfc-6265bis-03-4.1.2.7]. - `true` will set the `SameSite` attribute to `Strict` for strict same site enforcement. - `false` will not set the `SameSite` attribute. - `'lax'` will set the `SameSite` attribute to `Lax` for lax same site enforcement. - `'none'` will set the `SameSite` attribute to `None` for an explicit cross-site cookie. - `'strict'` will set the `SameSite` attribute to `Strict` for strict same site enforcement. More information about the different enforcement levels can be found in [the specification][rfc-6265bis-03-4.1.2.7]. **note** This is an attribute that has not yet been fully standardized, and may change in the future. This also means many clients may ignore this attribute until they understand it. ##### secure Specifies the `boolean` value for the [`Secure` `Set-Cookie` attribute][rfc-6265-5.2.5]. When truthy, the `Secure` attribute is set, otherwise it is not. By default, the `Secure` attribute is not set. **note** be careful when setting this to `true`, as compliant clients will not send the cookie back to the server in the future if the browser does not have an HTTPS connection. ## Example The following example uses this module in conjunction with the Node.js core HTTP server to prompt a user for their name and display it back on future visits. ```js var cookie = require('cookie'); var escapeHtml = require('escape-html'); var http = require('http'); var url = require('url'); function onRequest(req, res) { // Parse the query string var query = url.parse(req.url, true, true).query; if (query && query.name) { // Set a new cookie with the name res.setHeader('Set-Cookie', cookie.serialize('name', String(query.name), { httpOnly: true, maxAge: 60 * 60 * 24 * 7 // 1 week })); // Redirect back after setting cookie res.statusCode = 302; res.setHeader('Location', req.headers.referer || '/'); res.end(); return; } // Parse the cookies on the request var cookies = cookie.parse(req.headers.cookie || ''); // Get the visitor name set in the cookie var name = cookies.name; res.setHeader('Content-Type', 'text/html; charset=UTF-8'); if (name) { res.write('

Welcome back, ' + escapeHtml(name) + '!

'); } else { res.write('

Hello, new visitor!

'); } res.write('
'); res.write(' '); res.end('
'); } http.createServer(onRequest).listen(3000); ``` ## Testing ```sh $ npm test ``` ## Benchmark ``` $ npm run bench > cookie@0.3.1 bench cookie > node benchmark/index.js http_parser@2.8.0 node@6.14.2 v8@5.1.281.111 uv@1.16.1 zlib@1.2.11 ares@1.10.1-DEV icu@58.2 modules@48 napi@3 openssl@1.0.2o > node benchmark/parse.js cookie.parse 6 tests completed. simple x 1,200,691 ops/sec ±1.12% (189 runs sampled) decode x 1,012,994 ops/sec ±0.97% (186 runs sampled) unquote x 1,074,174 ops/sec ±2.43% (186 runs sampled) duplicates x 438,424 ops/sec ±2.17% (184 runs sampled) 10 cookies x 147,154 ops/sec ±1.01% (186 runs sampled) 100 cookies x 14,274 ops/sec ±1.07% (187 runs sampled) ``` ## References - [RFC 6265: HTTP State Management Mechanism][rfc-6265] - [Same-site Cookies][rfc-6265bis-03-4.1.2.7] [rfc-6265bis-03-4.1.2.7]: https://tools.ietf.org/html/draft-ietf-httpbis-rfc6265bis-03#section-4.1.2.7 [rfc-6265]: https://tools.ietf.org/html/rfc6265 [rfc-6265-5.1.4]: https://tools.ietf.org/html/rfc6265#section-5.1.4 [rfc-6265-5.2.1]: https://tools.ietf.org/html/rfc6265#section-5.2.1 [rfc-6265-5.2.2]: https://tools.ietf.org/html/rfc6265#section-5.2.2 [rfc-6265-5.2.3]: https://tools.ietf.org/html/rfc6265#section-5.2.3 [rfc-6265-5.2.4]: https://tools.ietf.org/html/rfc6265#section-5.2.4 [rfc-6265-5.2.5]: https://tools.ietf.org/html/rfc6265#section-5.2.5 [rfc-6265-5.2.6]: https://tools.ietf.org/html/rfc6265#section-5.2.6 [rfc-6265-5.3]: https://tools.ietf.org/html/rfc6265#section-5.3 ## License [MIT](LICENSE) [coveralls-image]: https://badgen.net/coveralls/c/github/jshttp/cookie/master [coveralls-url]: https://coveralls.io/r/jshttp/cookie?branch=master [node-version-image]: https://badgen.net/npm/node/cookie [node-version-url]: https://nodejs.org/en/download [npm-downloads-image]: https://badgen.net/npm/dm/cookie [npm-url]: https://npmjs.org/package/cookie [npm-version-image]: https://badgen.net/npm/v/cookie [travis-image]: https://badgen.net/travis/jshttp/cookie/master [travis-url]: https://travis-ci.org/jshttp/cookie cookie-0.4.1/benchmark/000077500000000000000000000000001364773371100147335ustar00rootroot00000000000000cookie-0.4.1/benchmark/index.js000066400000000000000000000013751364773371100164060ustar00rootroot00000000000000var fs = require('fs') var path = require('path') var spawn = require('child_process').spawn var exe = process.argv[0] var cwd = process.cwd() for (var dep in process.versions) { console.log(' %s@%s', dep, process.versions[dep]) } console.log('') runScripts(fs.readdirSync(__dirname)) function runScripts (fileNames) { var fileName = fileNames.shift() if (!fileName) return if (!/\.js$/i.test(fileName)) return runScripts(fileNames) if (fileName.toLowerCase() === 'index.js') return runScripts(fileNames) var fullPath = path.join(__dirname, fileName) console.log('> %s %s', exe, path.relative(cwd, fullPath)) var proc = spawn(exe, [fullPath], { 'stdio': 'inherit' }) proc.on('exit', function () { runScripts(fileNames) }) } cookie-0.4.1/benchmark/parse.js000066400000000000000000000025021364773371100164020ustar00rootroot00000000000000/** * Module dependencies. */ var benchmark = require('benchmark') var benchmarks = require('beautify-benchmark') /** * Globals for benchmark.js */ global.cookie = require('..') var suite = new benchmark.Suite() suite.add({ name: 'simple', minSamples: 100, fn: 'var val = cookie.parse("foo=bar")' }) suite.add({ name: 'decode', minSamples: 100, fn: 'var val = cookie.parse("foo=hello%20there!")' }) suite.add({ name: 'unquote', minSamples: 100, fn: 'var val = cookie.parse("foo=\\"foo bar\\"")' }) suite.add({ name: 'duplicates', minSamples: 100, fn: 'var val = cookie.parse(' + JSON.stringify(gencookies(2) + '; ' + gencookies(2)) + ')' }) suite.add({ name: '10 cookies', minSamples: 100, fn: 'var val = cookie.parse(' + JSON.stringify(gencookies(10)) + ')' }) suite.add({ name: '100 cookies', minSamples: 100, fn: 'var val = cookie.parse(' + JSON.stringify(gencookies(100)) + ')' }) suite.on('start', function onCycle (event) { process.stdout.write(' cookie.parse\n\n') }) suite.on('cycle', function onCycle (event) { benchmarks.add(event.target) }) suite.on('complete', function onComplete () { benchmarks.log() }) suite.run({async: false}) function gencookies (num) { var str = '' for (var i = 0; i < num; i++) { str += '; foo' + i + '=bar' } return str.substr(2) } cookie-0.4.1/index.js000066400000000000000000000077541364773371100144630ustar00rootroot00000000000000/*! * cookie * Copyright(c) 2012-2014 Roman Shtylman * Copyright(c) 2015 Douglas Christopher Wilson * MIT Licensed */ 'use strict'; /** * Module exports. * @public */ exports.parse = parse; exports.serialize = serialize; /** * Module variables. * @private */ var decode = decodeURIComponent; var encode = encodeURIComponent; var pairSplitRegExp = /; */; /** * RegExp to match field-content in RFC 7230 sec 3.2 * * field-content = field-vchar [ 1*( SP / HTAB ) field-vchar ] * field-vchar = VCHAR / obs-text * obs-text = %x80-FF */ var fieldContentRegExp = /^[\u0009\u0020-\u007e\u0080-\u00ff]+$/; /** * Parse a cookie header. * * Parse the given cookie header string into an object * The object has the various cookies as keys(names) => values * * @param {string} str * @param {object} [options] * @return {object} * @public */ function parse(str, options) { if (typeof str !== 'string') { throw new TypeError('argument str must be a string'); } var obj = {} var opt = options || {}; var pairs = str.split(pairSplitRegExp); var dec = opt.decode || decode; for (var i = 0; i < pairs.length; i++) { var pair = pairs[i]; var eq_idx = pair.indexOf('='); // skip things that don't look like key=value if (eq_idx < 0) { continue; } var key = pair.substr(0, eq_idx).trim() var val = pair.substr(++eq_idx, pair.length).trim(); // quoted values if ('"' == val[0]) { val = val.slice(1, -1); } // only assign once if (undefined == obj[key]) { obj[key] = tryDecode(val, dec); } } return obj; } /** * Serialize data into a cookie header. * * Serialize the a name value pair into a cookie string suitable for * http headers. An optional options object specified cookie parameters. * * serialize('foo', 'bar', { httpOnly: true }) * => "foo=bar; httpOnly" * * @param {string} name * @param {string} val * @param {object} [options] * @return {string} * @public */ function serialize(name, val, options) { var opt = options || {}; var enc = opt.encode || encode; if (typeof enc !== 'function') { throw new TypeError('option encode is invalid'); } if (!fieldContentRegExp.test(name)) { throw new TypeError('argument name is invalid'); } var value = enc(val); if (value && !fieldContentRegExp.test(value)) { throw new TypeError('argument val is invalid'); } var str = name + '=' + value; if (null != opt.maxAge) { var maxAge = opt.maxAge - 0; if (isNaN(maxAge) || !isFinite(maxAge)) { throw new TypeError('option maxAge is invalid') } str += '; Max-Age=' + Math.floor(maxAge); } if (opt.domain) { if (!fieldContentRegExp.test(opt.domain)) { throw new TypeError('option domain is invalid'); } str += '; Domain=' + opt.domain; } if (opt.path) { if (!fieldContentRegExp.test(opt.path)) { throw new TypeError('option path is invalid'); } str += '; Path=' + opt.path; } if (opt.expires) { if (typeof opt.expires.toUTCString !== 'function') { throw new TypeError('option expires is invalid'); } str += '; Expires=' + opt.expires.toUTCString(); } if (opt.httpOnly) { str += '; HttpOnly'; } if (opt.secure) { str += '; Secure'; } if (opt.sameSite) { var sameSite = typeof opt.sameSite === 'string' ? opt.sameSite.toLowerCase() : opt.sameSite; switch (sameSite) { case true: str += '; SameSite=Strict'; break; case 'lax': str += '; SameSite=Lax'; break; case 'strict': str += '; SameSite=Strict'; break; case 'none': str += '; SameSite=None'; break; default: throw new TypeError('option sameSite is invalid'); } } return str; } /** * Try decoding a string using a decoding function. * * @param {string} str * @param {function} decode * @private */ function tryDecode(str, decode) { try { return decode(str); } catch (e) { return str; } } cookie-0.4.1/package.json000066400000000000000000000020121364773371100152620ustar00rootroot00000000000000{ "name": "cookie", "description": "HTTP server cookie parsing and serialization", "version": "0.4.1", "author": "Roman Shtylman ", "contributors": [ "Douglas Christopher Wilson " ], "license": "MIT", "keywords": [ "cookie", "cookies" ], "repository": "jshttp/cookie", "devDependencies": { "beautify-benchmark": "0.2.4", "benchmark": "2.1.4", "eslint": "6.8.0", "eslint-plugin-markdown": "1.0.2", "mocha": "7.1.1", "nyc": "15.0.1" }, "files": [ "HISTORY.md", "LICENSE", "README.md", "index.js" ], "engines": { "node": ">= 0.6" }, "scripts": { "bench": "node benchmark/index.js", "lint": "eslint --plugin markdown --ext js,md .", "test": "mocha --reporter spec --bail --check-leaks --ui qunit test/", "test-ci": "nyc --reporter=text npm test", "test-cov": "nyc --reporter=html --reporter=text npm test", "version": "node scripts/version-history.js && git add HISTORY.md" } } cookie-0.4.1/scripts/000077500000000000000000000000001364773371100144705ustar00rootroot00000000000000cookie-0.4.1/scripts/version-history.js000066400000000000000000000027771364773371100202270ustar00rootroot00000000000000'use strict' var fs = require('fs') var path = require('path') var HISTORY_FILE_PATH = path.join(__dirname, '..', 'HISTORY.md') var MD_HEADER_REGEXP = /^====*$/ var VERSION = process.env.npm_package_version var VERSION_PLACEHOLDER_REGEXP = /^(?:unreleased|(\d+\.)+x)$/ var historyFileLines = fs.readFileSync(HISTORY_FILE_PATH, 'utf-8').split('\n') if (!MD_HEADER_REGEXP.test(historyFileLines[1])) { console.error('Missing header in HISTORY.md') process.exit(1) } if (!VERSION_PLACEHOLDER_REGEXP.test(historyFileLines[0])) { console.error('Missing placegolder version in HISTORY.md') process.exit(1) } if (historyFileLines[0].indexOf('x') !== -1) { var versionCheckRegExp = new RegExp('^' + historyFileLines[0].replace('x', '.+') + '$') if (!versionCheckRegExp.test(VERSION)) { console.error('Version %s does not match placeholder %s', VERSION, historyFileLines[0]) process.exit(1) } } historyFileLines[0] = VERSION + ' / ' + getLocaleDate() historyFileLines[1] = repeat('=', historyFileLines[0].length) fs.writeFileSync(HISTORY_FILE_PATH, historyFileLines.join('\n')) function getLocaleDate () { var now = new Date() return zeroPad(now.getFullYear(), 4) + '-' + zeroPad(now.getMonth() + 1, 2) + '-' + zeroPad(now.getDate(), 2) } function repeat (str, length) { var out = '' for (var i = 0; i < length; i++) { out += str } return out } function zeroPad (number, length) { var num = number.toString() while (num.length < length) { num = '0' + num } return num } cookie-0.4.1/test/000077500000000000000000000000001364773371100137605ustar00rootroot00000000000000cookie-0.4.1/test/parse.js000066400000000000000000000043051364773371100154320ustar00rootroot00000000000000 var assert = require('assert'); var cookie = require('..'); suite('parse'); test('argument validation', function() { assert.throws(cookie.parse.bind(), /argument str must be a string/); assert.throws(cookie.parse.bind(null, 42), /argument str must be a string/); }); test('basic', function() { assert.deepEqual({ foo: 'bar' }, cookie.parse('foo=bar')); assert.deepEqual({ foo: '123' }, cookie.parse('foo=123')); }); test('ignore spaces', function() { assert.deepEqual({ FOO: 'bar', baz: 'raz' }, cookie.parse('FOO = bar; baz = raz')); }); test('escaping', function() { assert.deepEqual({ foo: 'bar=123456789&name=Magic+Mouse' }, cookie.parse('foo="bar=123456789&name=Magic+Mouse"')); assert.deepEqual({ email: ' ",;/' }, cookie.parse('email=%20%22%2c%3b%2f')); }); test('ignore escaping error and return original value', function() { assert.deepEqual({ foo: '%1', bar: 'bar' }, cookie.parse('foo=%1;bar=bar')); }); test('ignore non values', function() { assert.deepEqual({ foo: '%1', bar: 'bar' }, cookie.parse('foo=%1;bar=bar;HttpOnly;Secure')); }); test('unencoded', function() { assert.deepEqual({ foo: 'bar=123456789&name=Magic+Mouse' }, cookie.parse('foo="bar=123456789&name=Magic+Mouse"',{ decode: function(value) { return value; } })); assert.deepEqual({ email: '%20%22%2c%3b%2f' }, cookie.parse('email=%20%22%2c%3b%2f',{ decode: function(value) { return value; } })); }); test('dates', function() { assert.deepEqual({ priority: 'true', Path: '/', expires: 'Wed, 29 Jan 2014 17:43:25 GMT' }, cookie.parse('priority=true; expires=Wed, 29 Jan 2014 17:43:25 GMT; Path=/',{ decode: function(value) { return value; } })); }); test('missing value', function() { assert.deepEqual({ bar: '1', fizz: '', buzz: '2' }, cookie.parse('foo; bar=1; fizz= ; buzz=2',{ decode: function(value) { return value; } })); }); test('assign only once', function() { assert.deepEqual({ foo: '%1', bar: 'bar' }, cookie.parse('foo=%1;bar=bar;foo=boo')); assert.deepEqual({ foo: 'false', bar: 'bar' }, cookie.parse('foo=false;bar=bar;foo=true')); assert.deepEqual({ foo: '', bar: 'bar' }, cookie.parse('foo=;bar=bar;foo=boo')); }); cookie-0.4.1/test/serialize.js000066400000000000000000000103451364773371100163100ustar00rootroot00000000000000// builtin var assert = require('assert'); var cookie = require('..'); suite('serialize'); test('basic', function() { assert.equal('foo=bar', cookie.serialize('foo', 'bar')); assert.equal('foo=bar%20baz', cookie.serialize('foo', 'bar baz')); assert.equal('foo=', cookie.serialize('foo', '')); assert.throws(cookie.serialize.bind(cookie, 'foo\n', 'bar'), /argument name is invalid/); assert.throws(cookie.serialize.bind(cookie, 'foo\u280a', 'bar'), /argument name is invalid/); assert.throws(cookie.serialize.bind(cookie, 'foo', 'bar', {encode: 42}), /option encode is invalid/); }); test('path', function() { assert.equal('foo=bar; Path=/', cookie.serialize('foo', 'bar', { path: '/' })); assert.throws(cookie.serialize.bind(cookie, 'foo', 'bar', { path: '/\n' }), /option path is invalid/); }); test('secure', function() { assert.equal('foo=bar; Secure', cookie.serialize('foo', 'bar', { secure: true })); assert.equal('foo=bar', cookie.serialize('foo', 'bar', { secure: false })); }); test('domain', function() { assert.equal('foo=bar; Domain=example.com', cookie.serialize('foo', 'bar', { domain: 'example.com' })); assert.throws(cookie.serialize.bind(cookie, 'foo', 'bar', { domain: 'example.com\n' }), /option domain is invalid/); }); test('httpOnly', function() { assert.equal('foo=bar; HttpOnly', cookie.serialize('foo', 'bar', { httpOnly: true })); }); test('maxAge', function() { assert.throws(function () { cookie.serialize('foo', 'bar', { maxAge: 'buzz' }); }, /option maxAge is invalid/) assert.throws(function () { cookie.serialize('foo', 'bar', { maxAge: Infinity }) }, /option maxAge is invalid/) assert.equal('foo=bar; Max-Age=1000', cookie.serialize('foo', 'bar', { maxAge: 1000 })); assert.equal('foo=bar; Max-Age=1000', cookie.serialize('foo', 'bar', { maxAge: '1000' })); assert.equal('foo=bar; Max-Age=0', cookie.serialize('foo', 'bar', { maxAge: 0 })); assert.equal('foo=bar; Max-Age=0', cookie.serialize('foo', 'bar', { maxAge: '0' })); assert.equal('foo=bar', cookie.serialize('foo', 'bar', { maxAge: null })); assert.equal('foo=bar', cookie.serialize('foo', 'bar', { maxAge: undefined })); assert.equal('foo=bar; Max-Age=3', cookie.serialize('foo', 'bar', { maxAge: 3.14 })); }); test('expires', function() { assert.equal('foo=bar; Expires=Sun, 24 Dec 2000 10:30:59 GMT', cookie.serialize('foo', 'bar', { expires: new Date(Date.UTC(2000, 11, 24, 10, 30, 59, 900)) })); assert.throws(cookie.serialize.bind(cookie, 'foo', 'bar', { expires: Date.now() }), /option expires is invalid/); }); test('sameSite', function() { assert.equal('foo=bar; SameSite=Strict', cookie.serialize('foo', 'bar', { sameSite: true })); assert.equal('foo=bar; SameSite=Strict', cookie.serialize('foo', 'bar', { sameSite: 'Strict' })); assert.equal('foo=bar; SameSite=Strict', cookie.serialize('foo', 'bar', { sameSite: 'strict' })); assert.equal('foo=bar; SameSite=Lax', cookie.serialize('foo', 'bar', { sameSite: 'Lax' })); assert.equal('foo=bar; SameSite=Lax', cookie.serialize('foo', 'bar', { sameSite: 'lax' })); assert.equal('foo=bar; SameSite=None', cookie.serialize('foo', 'bar', { sameSite: 'None' })); assert.equal('foo=bar; SameSite=None', cookie.serialize('foo', 'bar', { sameSite: 'none' })); assert.equal('foo=bar', cookie.serialize('foo', 'bar', { sameSite: false })); assert.throws(cookie.serialize.bind(cookie, 'foo', 'bar', { sameSite: 'foo' }), /option sameSite is invalid/); }); test('escaping', function() { assert.deepEqual('cat=%2B%20', cookie.serialize('cat', '+ ')); }); test('parse->serialize', function() { assert.deepEqual({ cat: 'foo=123&name=baz five' }, cookie.parse( cookie.serialize('cat', 'foo=123&name=baz five'))); assert.deepEqual({ cat: ' ";/' }, cookie.parse( cookie.serialize('cat', ' ";/'))); }); test('unencoded', function() { assert.deepEqual('cat=+ ', cookie.serialize('cat', '+ ', { encode: function(value) { return value; } })); assert.throws(cookie.serialize.bind(cookie, 'cat', '+ \n', { encode: function(value) { return value; } }), /argument val is invalid/); })