dani/lemonldap-ng
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Manage cookie expiration (#1131)

Browse Source
This commit is contained in:
Xavier Guimard 2017-03-15 10:01:29 +00:00
parent f6e5356178
commit 126fdb091c
5 changed files with 23 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Auth/SAML.pm
View File

@ -829,7 +829,7 @@ sub extractFormInfo {
value => 0,
domain => $self->conf->{domain},
secure => 0,
expires => '-1d',
expires => 'Wed, 21 Oct 2015 00:00:00 GMT',
)
);
@ -878,13 +878,14 @@ sub extractFormInfo {
# User can choose temporary (0) or persistent cookie (1)
my $cookie_type = $req->param("cookie_type") || "0";
# Cookie available 1 year
$req->addCookie(
$self->p->cookie(
name => $self->conf->{samlIdPResolveCookie},
value => $idp,
domain => $self->conf->{domain},
secure => $self->conf->{securedCookie},
expires => $cookie_type ? "+365d" : "",
name => $self->conf->{samlIdPResolveCookie},
value => $idp,
domain => $self->conf->{domain},
secure => $self->conf->{securedCookie},
( $cookie_type ? ( max_age => 31557600 ) : () ),
)
);
}

11
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Auth/Twitter.pm
View File

@ -114,12 +114,12 @@ sub extractFormInfo {
my $response = Net::OAuth->response('request token')
->from_post_body( $res->content );
# 1.2 Store token key and secret in cookies
# 1.2 Store token key and secret in cookies (available 180s)
$req->addCookie(
$self->cookie(
name => '_twitSec',
value => $response->token_secret,
expires => '+3m'
max_age => 180,
)
);
@ -198,7 +198,12 @@ sub extractFormInfo {
# Clean temporaries cookies
$req->addCookie(
$self->cookie( -name => '_twitSec', -value => 0, -expires => '-3m' ) );
$self->cookie(
name => '_twitSec',
value => 0,
expires => 'Wed, 21 Oct 2015 00:00:00 GMT'
)
);
PE_OK;
}

2
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Process.pm
View File

@ -253,7 +253,7 @@ sub extractFormInfo {
value => 0,
domain => $self->conf->{domain},
secure => 0,
expires => '-1d',
expires => 'Wed, 21 Oct 2015 00:00:00 GMT'
)
);
return PE_SESSIONEXPIRED;

7
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Main/Run.pm
View File

@ -483,7 +483,7 @@ sub _deleteSession {
value => 0,
domain => $self->conf->{domain},
secure => 0,
expires => '-1d',
expires => 'Wed, 21 Oct 2015 00:00:00 GMT'
)
) unless ($preserveCookie);
}
@ -498,7 +498,7 @@ sub _deleteSession {
value => 0,
domain => $self->conf->{domain},
secure => 0,
expires => '-1d',
expires => 'Wed, 21 Oct 2015 00:00:00 GMT'
)
) unless ($preserveCookie);
@ -653,7 +653,8 @@ sub cookie {
$res[0] .= "=$h{value}";
$h{path} ||= '/';
$h{HttpOnly} //= $self->conf->{httpOnly};
$h{expires} //= $self->conf->{cookieExpiration};
$h{max_age} //= $self->conf->{cookieExpiration}
if ( $self->conf->{cookieExpiration} );
foreach (qw(domain path expires max_age HttpOnly)) {
my $f = $_;
$f =~ s/_/-/g;

4
lemonldap-ng-portal/lib/Lemonldap/NG/Portal/Plugins/StayConnected.pm
View File

@ -98,11 +98,13 @@ sub storeBrowser {
fingerprint => $fg,
},
);
# Cookie available 30 days
$req->addCookie(
$self->p->cookie(
name => 'llngconnexion',
value => $ps->id,
expires => '+1M',
max_age => 2592000,
)
);
}