123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488 |
- <?php
- namespace GuzzleHttp\Cookie;
- /**
- * Set-Cookie object
- */
- class SetCookie
- {
- /**
- * @var array
- */
- private static $defaults = [
- 'Name' => null,
- 'Value' => null,
- 'Domain' => null,
- 'Path' => '/',
- 'Max-Age' => null,
- 'Expires' => null,
- 'Secure' => false,
- 'Discard' => false,
- 'HttpOnly' => false,
- ];
- /**
- * @var array Cookie data
- */
- private $data;
- /**
- * Create a new SetCookie object from a string.
- *
- * @param string $cookie Set-Cookie header string
- */
- public static function fromString(string $cookie): self
- {
- // Create the default return array
- $data = self::$defaults;
- // Explode the cookie string using a series of semicolons
- $pieces = \array_filter(\array_map('trim', \explode(';', $cookie)));
- // The name of the cookie (first kvp) must exist and include an equal sign.
- if (!isset($pieces[0]) || \strpos($pieces[0], '=') === false) {
- return new self($data);
- }
- // Add the cookie pieces into the parsed data array
- foreach ($pieces as $part) {
- $cookieParts = \explode('=', $part, 2);
- $key = \trim($cookieParts[0]);
- $value = isset($cookieParts[1])
- ? \trim($cookieParts[1], " \n\r\t\0\x0B")
- : true;
- // Only check for non-cookies when cookies have been found
- if (!isset($data['Name'])) {
- $data['Name'] = $key;
- $data['Value'] = $value;
- } else {
- foreach (\array_keys(self::$defaults) as $search) {
- if (!\strcasecmp($search, $key)) {
- if ($search === 'Max-Age') {
- if (is_numeric($value)) {
- $data[$search] = (int) $value;
- }
- } else {
- $data[$search] = $value;
- }
- continue 2;
- }
- }
- $data[$key] = $value;
- }
- }
- return new self($data);
- }
- /**
- * @param array $data Array of cookie data provided by a Cookie parser
- */
- public function __construct(array $data = [])
- {
- $this->data = self::$defaults;
- if (isset($data['Name'])) {
- $this->setName($data['Name']);
- }
- if (isset($data['Value'])) {
- $this->setValue($data['Value']);
- }
- if (isset($data['Domain'])) {
- $this->setDomain($data['Domain']);
- }
- if (isset($data['Path'])) {
- $this->setPath($data['Path']);
- }
- if (isset($data['Max-Age'])) {
- $this->setMaxAge($data['Max-Age']);
- }
- if (isset($data['Expires'])) {
- $this->setExpires($data['Expires']);
- }
- if (isset($data['Secure'])) {
- $this->setSecure($data['Secure']);
- }
- if (isset($data['Discard'])) {
- $this->setDiscard($data['Discard']);
- }
- if (isset($data['HttpOnly'])) {
- $this->setHttpOnly($data['HttpOnly']);
- }
- // Set the remaining values that don't have extra validation logic
- foreach (array_diff(array_keys($data), array_keys(self::$defaults)) as $key) {
- $this->data[$key] = $data[$key];
- }
- // Extract the Expires value and turn it into a UNIX timestamp if needed
- if (!$this->getExpires() && $this->getMaxAge()) {
- // Calculate the Expires date
- $this->setExpires(\time() + $this->getMaxAge());
- } elseif (null !== ($expires = $this->getExpires()) && !\is_numeric($expires)) {
- $this->setExpires($expires);
- }
- }
- public function __toString()
- {
- $str = $this->data['Name'].'='.($this->data['Value'] ?? '').'; ';
- foreach ($this->data as $k => $v) {
- if ($k !== 'Name' && $k !== 'Value' && $v !== null && $v !== false) {
- if ($k === 'Expires') {
- $str .= 'Expires='.\gmdate('D, d M Y H:i:s \G\M\T', $v).'; ';
- } else {
- $str .= ($v === true ? $k : "{$k}={$v}").'; ';
- }
- }
- }
- return \rtrim($str, '; ');
- }
- public function toArray(): array
- {
- return $this->data;
- }
- /**
- * Get the cookie name.
- *
- * @return string
- */
- public function getName()
- {
- return $this->data['Name'];
- }
- /**
- * Set the cookie name.
- *
- * @param string $name Cookie name
- */
- public function setName($name): void
- {
- if (!is_string($name)) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a string to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Name'] = (string) $name;
- }
- /**
- * Get the cookie value.
- *
- * @return string|null
- */
- public function getValue()
- {
- return $this->data['Value'];
- }
- /**
- * Set the cookie value.
- *
- * @param string $value Cookie value
- */
- public function setValue($value): void
- {
- if (!is_string($value)) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a string to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Value'] = (string) $value;
- }
- /**
- * Get the domain.
- *
- * @return string|null
- */
- public function getDomain()
- {
- return $this->data['Domain'];
- }
- /**
- * Set the domain of the cookie.
- *
- * @param string|null $domain
- */
- public function setDomain($domain): void
- {
- if (!is_string($domain) && null !== $domain) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a string or null to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Domain'] = null === $domain ? null : (string) $domain;
- }
- /**
- * Get the path.
- *
- * @return string
- */
- public function getPath()
- {
- return $this->data['Path'];
- }
- /**
- * Set the path of the cookie.
- *
- * @param string $path Path of the cookie
- */
- public function setPath($path): void
- {
- if (!is_string($path)) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a string to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Path'] = (string) $path;
- }
- /**
- * Maximum lifetime of the cookie in seconds.
- *
- * @return int|null
- */
- public function getMaxAge()
- {
- return null === $this->data['Max-Age'] ? null : (int) $this->data['Max-Age'];
- }
- /**
- * Set the max-age of the cookie.
- *
- * @param int|null $maxAge Max age of the cookie in seconds
- */
- public function setMaxAge($maxAge): void
- {
- if (!is_int($maxAge) && null !== $maxAge) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing an int or null to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Max-Age'] = $maxAge === null ? null : (int) $maxAge;
- }
- /**
- * The UNIX timestamp when the cookie Expires.
- *
- * @return string|int|null
- */
- public function getExpires()
- {
- return $this->data['Expires'];
- }
- /**
- * Set the unix timestamp for which the cookie will expire.
- *
- * @param int|string|null $timestamp Unix timestamp or any English textual datetime description.
- */
- public function setExpires($timestamp): void
- {
- if (!is_int($timestamp) && !is_string($timestamp) && null !== $timestamp) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing an int, string or null to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Expires'] = null === $timestamp ? null : (\is_numeric($timestamp) ? (int) $timestamp : \strtotime((string) $timestamp));
- }
- /**
- * Get whether or not this is a secure cookie.
- *
- * @return bool
- */
- public function getSecure()
- {
- return $this->data['Secure'];
- }
- /**
- * Set whether or not the cookie is secure.
- *
- * @param bool $secure Set to true or false if secure
- */
- public function setSecure($secure): void
- {
- if (!is_bool($secure)) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a bool to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Secure'] = (bool) $secure;
- }
- /**
- * Get whether or not this is a session cookie.
- *
- * @return bool|null
- */
- public function getDiscard()
- {
- return $this->data['Discard'];
- }
- /**
- * Set whether or not this is a session cookie.
- *
- * @param bool $discard Set to true or false if this is a session cookie
- */
- public function setDiscard($discard): void
- {
- if (!is_bool($discard)) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a bool to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['Discard'] = (bool) $discard;
- }
- /**
- * Get whether or not this is an HTTP only cookie.
- *
- * @return bool
- */
- public function getHttpOnly()
- {
- return $this->data['HttpOnly'];
- }
- /**
- * Set whether or not this is an HTTP only cookie.
- *
- * @param bool $httpOnly Set to true or false if this is HTTP only
- */
- public function setHttpOnly($httpOnly): void
- {
- if (!is_bool($httpOnly)) {
- trigger_deprecation('guzzlehttp/guzzle', '7.4', 'Not passing a bool to %s::%s() is deprecated and will cause an error in 8.0.', __CLASS__, __FUNCTION__);
- }
- $this->data['HttpOnly'] = (bool) $httpOnly;
- }
- /**
- * Check if the cookie matches a path value.
- *
- * A request-path path-matches a given cookie-path if at least one of
- * the following conditions holds:
- *
- * - The cookie-path and the request-path are identical.
- * - The cookie-path is a prefix of the request-path, and the last
- * character of the cookie-path is %x2F ("/").
- * - The cookie-path is a prefix of the request-path, and the first
- * character of the request-path that is not included in the cookie-
- * path is a %x2F ("/") character.
- *
- * @param string $requestPath Path to check against
- */
- public function matchesPath(string $requestPath): bool
- {
- $cookiePath = $this->getPath();
- // Match on exact matches or when path is the default empty "/"
- if ($cookiePath === '/' || $cookiePath == $requestPath) {
- return true;
- }
- // Ensure that the cookie-path is a prefix of the request path.
- if (0 !== \strpos($requestPath, $cookiePath)) {
- return false;
- }
- // Match if the last character of the cookie-path is "/"
- if (\substr($cookiePath, -1, 1) === '/') {
- return true;
- }
- // Match if the first character not included in cookie path is "/"
- return \substr($requestPath, \strlen($cookiePath), 1) === '/';
- }
- /**
- * Check if the cookie matches a domain value.
- *
- * @param string $domain Domain to check against
- */
- public function matchesDomain(string $domain): bool
- {
- $cookieDomain = $this->getDomain();
- if (null === $cookieDomain) {
- return true;
- }
- // Remove the leading '.' as per spec in RFC 6265.
- // https://datatracker.ietf.org/doc/html/rfc6265#section-5.2.3
- $cookieDomain = \ltrim(\strtolower($cookieDomain), '.');
- $domain = \strtolower($domain);
- // Domain not set or exact match.
- if ('' === $cookieDomain || $domain === $cookieDomain) {
- return true;
- }
- // Matching the subdomain according to RFC 6265.
- // https://datatracker.ietf.org/doc/html/rfc6265#section-5.1.3
- if (\filter_var($domain, \FILTER_VALIDATE_IP)) {
- return false;
- }
- return (bool) \preg_match('/\.'.\preg_quote($cookieDomain, '/').'$/', $domain);
- }
- /**
- * Check if the cookie is expired.
- */
- public function isExpired(): bool
- {
- return $this->getExpires() !== null && \time() > $this->getExpires();
- }
- /**
- * Check if the cookie is valid according to RFC 6265.
- *
- * @return bool|string Returns true if valid or an error message if invalid
- */
- public function validate()
- {
- $name = $this->getName();
- if ($name === '') {
- return 'The cookie name must not be empty';
- }
- // Check if any of the invalid characters are present in the cookie name
- if (\preg_match(
- '/[\x00-\x20\x22\x28-\x29\x2c\x2f\x3a-\x40\x5c\x7b\x7d\x7f]/',
- $name
- )) {
- return 'Cookie name must not contain invalid characters: ASCII '
- .'Control characters (0-31;127), space, tab and the '
- .'following characters: ()<>@,;:\"/?={}';
- }
- // Value must not be null. 0 and empty string are valid. Empty strings
- // are technically against RFC 6265, but known to happen in the wild.
- $value = $this->getValue();
- if ($value === null) {
- return 'The cookie value must not be empty';
- }
- // Domains must not be empty, but can be 0. "0" is not a valid internet
- // domain, but may be used as server name in a private network.
- $domain = $this->getDomain();
- if ($domain === null || $domain === '') {
- return 'The cookie domain must not be empty';
- }
- return true;
- }
- }
|