/*
 * JBoss, Home of Professional Open Source.
 * Copyright 2014 Red Hat, Inc., and individual contributors
 * as indicated by the @author tags.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 *  Unless required by applicable law or agreed to in writing, software
 *  distributed under the License is distributed on an "AS IS" BASIS,
 *  WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 *  See the License for the specific language governing permissions and
 *  limitations under the License.
 */

package io.undertow.server.handlers;

import java.util.Collections;
import java.util.Map;
import java.util.Set;

import io.undertow.server.HandlerWrapper;
import io.undertow.server.HttpHandler;
import io.undertow.server.HttpServerExchange;
import io.undertow.server.ResponseCommitListener;
import io.undertow.server.handlers.builder.HandlerBuilder;

Handler that will set the secure flag on all cookies that are received over a secure connection
/** * Handler that will set the secure flag on all cookies that are received over a secure connection */
public class SecureCookieHandler implements HttpHandler { public static final HandlerWrapper WRAPPER = new HandlerWrapper() { @Override public HttpHandler wrap(HttpHandler handler) { return new SecureCookieHandler(handler); } }; private final HttpHandler next; public SecureCookieHandler(HttpHandler next) { this.next = next; } @Override public void handleRequest(HttpServerExchange exchange) throws Exception { if(exchange.isSecure()) { exchange.addResponseCommitListener(new ResponseCommitListener() { @Override public void beforeCommit(HttpServerExchange exchange) { for(Map.Entry<String, Cookie> cookie : exchange.getResponseCookies().entrySet()) { cookie.getValue().setSecure(true); } } }); } next.handleRequest(exchange); } public static class Builder implements HandlerBuilder { @Override public String name() { return "secure-cookie"; } @Override public Map<String, Class<?>> parameters() { return Collections.emptyMap(); } @Override public Set<String> requiredParameters() { return Collections.emptySet(); } @Override public String defaultParameter() { return null; } @Override public HandlerWrapper build(Map<String, Object> config) { return WRAPPER; } } }