【计网】从零开始学习http协议 ---深入理解cookie和session

resp.AddHeader("Set-Cookie", "username=zhansan");
resp.AddHeader("Set-Cookie", "passwd=123456");

//...
	resp.AddHeader("Content-Length", std::to_string(content.size()));
    resp.AddHeader(suffix, _mini_type[suffix]);
    resp.AddHeader("Set-Cookie", "username=zhansan");
//...

Set-Cookie: username=peter; expires=Thu, 18 Dec 2024 12:00:00UTC; path=/; domain=.example.com; secure; HttpOnly

std::string GetMonth(int day)
    {
        std::vector<std::string> Month = {"Jan", "Feb", "Mar", "Apr", "May", "Jun", "Jul", "Aug", "Sep", "Oct", "Nov", "Dec"};
        return Month[day];
    }
    std::string GetWeekday(int day)
    {
        std::vector<std::string> Weekday = {"Sun", "Mon", "Tue", "Wed", "Thu", "Fri", "Sat"};
        return Weekday[day];
    }
    // 设置cookie属性
    std::string ExpireTimeUseRFC1123(int t) // 设置过期时间
    {
        // 获取当前过期时间戳
        time_t timeout = time(nullptr) + t;
        // 通过gmtime函数将时间戳转换成UTC时间
        struct tm *tmp = gmtime(&timeout);
        // 将时间写入到时间缓冲区
        char timebuffer[256];
        // expires=Thu, 18 Dec 2024 12:00:00 UTC
        snprintf(timebuffer, sizeof(timebuffer), "%s, %02d %s %04d %02d:%02d:%02d UTC",
                 GetWeekday(tmp->tm_wday).c_str(),
                 tmp->tm_mday,
                 GetMonth(tmp->tm_mon).c_str(),
                 tmp->tm_year + 1900,
                 tmp->tm_hour,
                 tmp->tm_min,
                 tmp->tm_sec);
        return timebuffer;
    }

//...
 std::string cookie = "username=zhansan";
 cookie += "; expires=" + ExpireTimeUseRFC1123(60) ;//过期时间设置为一分钟后
 resp.AddHeader("Set-Cookie", cookie);
//...

   cookie += "; path=";//设置cookie路径
   cookie += "/a/b";

// 用来进行测试说明
class Session
{
public:
    Session(const std::string &username, const std::string &status)
        : _username(username), _status(status)
    {
        _create_time = time(nullptr); // 获取时间戳就行了，后面实际需要，就转化就转换一下
    }
    ~Session()
    {
    }

public:
    std::string _username = "";
    std::string _status = "";
    uint64_t _create_time = 0;
    uint64_t _time_out = 0; // 60*5过期时间
    std::string vip = "";   // 是否为vip
    int active = 0;         //
    std::string pos = "";
    // 当然还可以再加任何其他信息，看你的需求
    //...
};

using session_ptr = std::shared_ptr<Session>;

class SessionManager
{
public:
    SessionManager()
    {
        srand(time(nullptr) ^ getpid());
    }
    std::string AddSession(session_ptr s)
    {
        LOG(DEBUG, "AddSession\n");
        uint32_t randomid = rand(); // 随机数+时间戳，实际有形成sessionid的库，比如boost uuid库，或者其他第三方库等
        std::string sessionid = std::to_string(randomid);
        LOG(DEBUG, "randomid:%s ptr:%s %s\n", sessionid.c_str(), s->_username.c_str(), s->_status.c_str());

        _sessions.insert(std::make_pair(sessionid , s));
        LOG(DEBUG, "AddSession success:%s\n", _sessions[sessionid]);

        return sessionid;
    }
    session_ptr GetSession(const std::string sessionid)
    {
        if (_sessions.find(sessionid) == _sessions.end())
            return nullptr;
        return _sessions[sessionid];
    }
    ~SessionManager()
    {
    }

private:
    std::map<std::string, session_ptr> _sessions;
};

//...
				static int number = 0;
                if (hreq.Url() == "/login.html") // 用/login path向指定浏览器写入sessionid，并在服务器维护对应的session对象
                {   
                    LOG(DEBUG , "进入session判断\n");
                    std::string sessionid = hreq.SessionId();
                    LOG(DEBUG , "获取到session :%s\n" , sessionid .c_str());
                    if (sessionid.empty()) // 说明历史没有登陆过
                    {
                        LOG(DEBUG , "说明历史没有登陆过\n");
                        std::string user = "user-" + std::to_string(number++);
                        session_ptr s = std::make_shared<Session>(user, "logined");
                        LOG(DEBUG , "session user:%s status:%s\n" , s->_username.c_str() ,s->_status.c_str());
                        std::string sessionid = _session_manager->AddSession(s);
                        LOG(DEBUG, "%s 被添加, sessionid是: %s\n", user.c_str(), sessionid.c_str());
                        resp.AddHeader("Set-Cookie", "sessionid=" + sessionid);
                    }
                }
                else
                {
                    // 当浏览器在本站点任何路径中活跃，都会自动提交sessionid, 我们就能知道谁活跃了.
                    std::string sessionid = hreq.SessionId();
                    if (!sessionid.empty())
                    {
                        session_ptr s = _session_manager->GetSession(sessionid);
                        // 这个地方有坑，一定要判断服务器端session对象是否存在，因为可能测试的时候
                        // 浏览器还有历史sessionid，但是服务器重启之后，session对象没有了.
                        if (s != nullptr)
                            LOG(DEBUG, "%s 正在活跃.\n", s->_username.c_str());
                        else
                            LOG(DEBUG, "cookie : %s 已经过期, 需要清理\n", sessionid.c_str());
                    }
                }

//...