public class MockSessionCookieConfig extends Object implements SessionCookieConfig
SessionCookieConfig
interface.ServletContext.getSessionCookieConfig()
Constructor and Description |
---|
MockSessionCookieConfig() |
Modifier and Type | Method and Description |
---|---|
String |
getComment()
Gets the comment that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
String |
getDomain()
Gets the domain name that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
int |
getMaxAge()
Gets the lifetime (in seconds) of the session tracking cookies
created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
String |
getName()
Gets the name that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
String |
getPath()
Gets the path that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
boolean |
isHttpOnly()
Checks if the session tracking cookies created on behalf of the
application represented by the ServletContext from which
this SessionCookieConfig was acquired will be marked as
HttpOnly.
|
boolean |
isSecure()
Checks if the session tracking cookies created on behalf of the
application represented by the ServletContext from which
this SessionCookieConfig was acquired will be marked as
secure even if the request that initiated the corresponding
session is using plain HTTP instead of HTTPS.
|
void |
setComment(String comment)
Sets the comment that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
void |
setDomain(String domain)
Sets the domain name that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
void |
setHttpOnly(boolean httpOnly)
Marks or unmarks the session tracking cookies created on behalf
of the application represented by the ServletContext from
which this SessionCookieConfig was acquired as
HttpOnly.
|
void |
setMaxAge(int maxAge)
Sets the lifetime (in seconds) for the session tracking cookies
created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
void |
setName(String name)
Sets the name that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
void |
setPath(String path)
Sets the path that will be assigned to any session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.
|
void |
setSecure(boolean secure)
Marks or unmarks the session tracking cookies created on behalf of
the application represented by the ServletContext from which
this SessionCookieConfig was acquired as secure.
|
public void setName(@Nullable String name)
javax.servlet.SessionCookieConfig
NOTE: Changing the name of session tracking cookies may break other tiers (for example, a load balancing frontend) that assume the cookie name to be equal to the default JSESSIONID, and therefore should only be done cautiously.
setName
in interface SessionCookieConfig
name
- the cookie name to use@Nullable public String getName()
javax.servlet.SessionCookieConfig
By default, JSESSIONID will be used as the cookie name.
getName
in interface SessionCookieConfig
SessionCookieConfig.setName(java.lang.String)
, or
null if SessionCookieConfig.setName(java.lang.String)
was never calledCookie.getName()
public void setDomain(@Nullable String domain)
javax.servlet.SessionCookieConfig
setDomain
in interface SessionCookieConfig
domain
- the cookie domain to useCookie.setDomain(String)
@Nullable public String getDomain()
javax.servlet.SessionCookieConfig
getDomain
in interface SessionCookieConfig
SessionCookieConfig.setDomain(java.lang.String)
, or
null if SessionCookieConfig.setDomain(java.lang.String)
was never calledCookie.getDomain()
public void setPath(@Nullable String path)
javax.servlet.SessionCookieConfig
setPath
in interface SessionCookieConfig
path
- the cookie path to useCookie.setPath(String)
@Nullable public String getPath()
javax.servlet.SessionCookieConfig
By default, the context path of the ServletContext from which this SessionCookieConfig was acquired will be used.
getPath
in interface SessionCookieConfig
SessionCookieConfig.setPath(java.lang.String)
, or null
if SessionCookieConfig.setPath(java.lang.String)
was never calledCookie.getPath()
public void setComment(@Nullable String comment)
javax.servlet.SessionCookieConfig
As a side effect of this call, the session tracking cookies
will be marked with a Version
attribute equal to
1
.
setComment
in interface SessionCookieConfig
comment
- the cookie comment to useCookie.setComment(String)
,
Cookie.getVersion()
@Nullable public String getComment()
javax.servlet.SessionCookieConfig
getComment
in interface SessionCookieConfig
SessionCookieConfig.setComment(java.lang.String)
, or
null if SessionCookieConfig.setComment(java.lang.String)
was never calledCookie.getComment()
public void setHttpOnly(boolean httpOnly)
javax.servlet.SessionCookieConfig
A cookie is marked as HttpOnly by adding the HttpOnly attribute to it. HttpOnly cookies are not supposed to be exposed to client-side scripting code, and may therefore help mitigate certain kinds of cross-site scripting attacks.
setHttpOnly
in interface SessionCookieConfig
httpOnly
- true if the session tracking cookies created
on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired shall be marked as HttpOnly, false otherwiseCookie.setHttpOnly(boolean)
public boolean isHttpOnly()
javax.servlet.SessionCookieConfig
isHttpOnly
in interface SessionCookieConfig
Cookie.isHttpOnly()
public void setSecure(boolean secure)
javax.servlet.SessionCookieConfig
One use case for marking a session tracking cookie as secure, even though the request that initiated the session came over HTTP, is to support a topology where the web container is front-ended by an SSL offloading load balancer. In this case, the traffic between the client and the load balancer will be over HTTPS, whereas the traffic between the load balancer and the web container will be over HTTP.
setSecure
in interface SessionCookieConfig
secure
- true if the session tracking cookies created on
behalf of the application represented by the ServletContext
from which this SessionCookieConfig was acquired shall be
marked as secure even if the request that initiated the
corresponding session is using plain HTTP instead of HTTPS, and false
if they shall be marked as secure only if the request that
initiated the corresponding session was also secureCookie.setSecure(boolean)
,
ServletRequest.isSecure()
public boolean isSecure()
javax.servlet.SessionCookieConfig
isSecure
in interface SessionCookieConfig
Cookie.getSecure()
,
ServletRequest.isSecure()
public void setMaxAge(int maxAge)
javax.servlet.SessionCookieConfig
setMaxAge
in interface SessionCookieConfig
maxAge
- the lifetime (in seconds) of the session tracking
cookies created on behalf of the application represented by the
ServletContext from which this SessionCookieConfig
was acquired.Cookie.setMaxAge(int)
public int getMaxAge()
javax.servlet.SessionCookieConfig
By default, -1 is returned.
getMaxAge
in interface SessionCookieConfig
Cookie.getMaxAge()