// ---------------- Fields --------------

// The value of the cookie itself.

private final String name; // NAME= ... "$Name" style is reserved

private String value; // value of NAME

// Attributes encoded in the header's cookie fields.

private String comment; // Comment=VALUE ... describes cookie's use

private String commentURL; // CommentURL="http URL" ... describes cookie's use

private boolean toDiscard; // Discard ... discard cookie unconditionally

private String domain; // Domain=VALUE ... domain that sees cookie

private long maxAge = MAX_AGE_UNSPECIFIED; // Max-Age=VALUE ... cookies auto-expire

private String path; // Path=VALUE ... URLs that see the cookie

private String portlist; // Port[="portlist"] ... the port cookie may be returned to

private boolean secure; // Secure ... e.g. use SSL

private boolean httpOnly; // HttpOnly ... i.e. not accessible to scripts

private int version = 1; // Version=1 ... RFC 2965 style

// The original header this cookie was constructed from, if it was

// constructed by parsing a header, otherwise null.

private final String header;

// Hold the creation time (in seconds) of the http cookie for later

// expiration calculation

private final long whenCreated;

// Since the positive and zero max-age have their meanings,

// this value serves as a hint as 'not specify max-age'

private static final long MAX_AGE_UNSPECIFIED = -1;

// date formats used by Netscape's cookie draft

// as well as formats seen on various sites

private static final String[] COOKIE_DATE_FORMATS = {

"EEE',' dd-MMM-yyyy HH:mm:ss 'GMT'",

"EEE',' dd MMM yyyy HH:mm:ss 'GMT'",

"EEE MMM dd yyyy HH:mm:ss 'GMT'Z",

"EEE',' dd-MMM-yy HH:mm:ss 'GMT'",

"EEE',' dd MMM yy HH:mm:ss 'GMT'",

"EEE MMM dd yy HH:mm:ss 'GMT'Z"

};

// constant strings represent set-cookie header token

private static final String SET_COOKIE = "set-cookie:";

private static final String SET_COOKIE2 = "set-cookie2:";

// ---------------- Ctors --------------

/**

public HttpCookie(String name, String value) {

this(name, value, null /*header*/);

}

private HttpCookie(String name, String value, String header) {

this(name, value, header, System.currentTimeMillis());

}

/**

HttpCookie(String name, String value, String header, long creationTime) {

name = name.trim();

if (name.isEmpty() || !isToken(name) || name.charAt(0) == '$') {

throw new IllegalArgumentException("Illegal cookie name");

}

this.name = name;

this.value = value;

toDiscard = false;

secure = false;

whenCreated = creationTime;

portlist = null;

this.header = header;

}

/**

public static List<HttpCookie> parse(String header) {

return parse(header, false, -1L);

}

// Private version of parse() that will store the original header used to

// create the cookie, in the cookie itself. This can be useful for filtering

// Set-Cookie[2] headers, using the internal parsing logic defined in this

// class. Also, allows for testing by specifying the creation time.

static List<HttpCookie> parse(String header, boolean retainHeader, long currentTimeMillis) {

int version = guessCookieVersion(header);

// if header start with set-cookie or set-cookie2, strip it off

if (startsWithIgnoreCase(header, SET_COOKIE2)) {

header = header.substring(SET_COOKIE2.length());

} else if (startsWithIgnoreCase(header, SET_COOKIE)) {

header = header.substring(SET_COOKIE.length());

}

List<HttpCookie> cookies = new java.util.ArrayList<>();

// The Netscape cookie may have a comma in its expires attribute, while

// the comma is the delimiter in rfc 2965/2109 cookie header string.

// so the parse logic is slightly different

if (version == 0) {

// Netscape draft cookie

HttpCookie cookie = parseInternal(header, retainHeader, currentTimeMillis);

cookie.setVersion(0);

cookies.add(cookie);

} else {

// rfc2965/2109 cookie

// if header string contains more than one cookie,

// it'll separate them with comma

List<String> cookieStrings = splitMultiCookies(header);

for (String cookieStr : cookieStrings) {

HttpCookie cookie = parseInternal(cookieStr, retainHeader, currentTimeMillis);

cookie.setVersion(1);

cookies.add(cookie);

}

}

return cookies;

}

// ---------------- Public operations --------------

/**

public boolean hasExpired() {

return hasExpired(System.currentTimeMillis());

}

// PP for testing

boolean hasExpired(long currentTimeMillis) {

if (maxAge == 0) return true;

// if not specify max-age, this cookie should be

// discarded when user agent is to be closed, but

// it is not expired.

if (maxAge < 0) return false;

long deltaSecond = (currentTimeMillis - whenCreated) / 1000;

if (deltaSecond > maxAge)

return true;

else

return false;

}

/**

public void setComment(String purpose) {

comment = purpose;

}

/**

public String getComment() {

return comment;

}

/**

public void setCommentURL(String purpose) {

commentURL = purpose;

}

/**

public String getCommentURL() {

return commentURL;

}

/**

public void setDiscard(boolean discard) {

toDiscard = discard;

}

/**

public boolean getDiscard() {

return toDiscard;

}

/**

public void setPortlist(String ports) {

portlist = ports;

}

/**

public String getPortlist() {

return portlist;

}

/**

public void setDomain(String pattern) {

if (pattern != null)

domain = pattern.toLowerCase(Locale.ROOT);

else

domain = pattern;

}

/**

public String getDomain() {

return domain;

}

/**

public void setMaxAge(long expiry) {

maxAge = expiry;

}

/**

public long getMaxAge() {

return maxAge;

}

/**

public void setPath(String uri) {

path = uri;

}

/**

public String getPath() {

return path;

}

/**

public void setSecure(boolean flag) {

secure = flag;

}

/**

public boolean getSecure() {

return secure;

}

/**

public String getName() {

return name;

}

/**

public void setValue(String newValue) {

value = newValue;

}

/**

public String getValue() {

return value;

}

/**

public int getVersion() {

return version;

}

/**

public void setVersion(int v) {

if (v != 0 && v != 1) {

throw new IllegalArgumentException("cookie version should be 0 or 1");

}

version = v;

}

/**

public boolean isHttpOnly() {

return httpOnly;

}

/**

public void setHttpOnly(boolean httpOnly) {

this.httpOnly = httpOnly;

}

/**

public static boolean domainMatches(String domain, String host) {

if (domain == null || host == null)

return false;

// if there's no embedded dot in domain and domain is not .local

boolean isLocalDomain = ".local".equalsIgnoreCase(domain);

int embeddedDotInDomain = domain.indexOf('.');

if (embeddedDotInDomain == 0)

embeddedDotInDomain = domain.indexOf('.', 1);

if (!isLocalDomain

&& (embeddedDotInDomain == -1 ||

embeddedDotInDomain == domain.length() - 1))

return false;

// if the host name contains no dot and the domain name

// is .local or host.local

int firstDotInHost = host.indexOf('.');

if (firstDotInHost == -1 &&

(isLocalDomain ||

domain.equalsIgnoreCase(host + ".local"))) {

return true;

}

int domainLength = domain.length();

int lengthDiff = host.length() - domainLength;

if (lengthDiff == 0) {

// if the host name and the domain name are just string-compare equal

return host.equalsIgnoreCase(domain);

}

else if (lengthDiff > 0) {

// need to check H & D component

String H = host.substring(0, lengthDiff);

String D = host.substring(lengthDiff);

return (H.indexOf('.') == -1 && D.equalsIgnoreCase(domain));

}

else if (lengthDiff == -1) {

// if domain is actually .host

return (domain.charAt(0) == '.' &&

host.equalsIgnoreCase(domain.substring(1)));

}

return false;

}

/**

@Override

public String toString() {

if (getVersion() > 0) {

return toRFC2965HeaderString();

} else {

return toNetscapeHeaderString();

}

}

/**

@Override

public boolean equals(Object obj) {

if (obj == this)

return true;

if (!(obj instanceof HttpCookie other))

return false;

// One http cookie is equal to another cookie (RFC 2965 sec. 3.3.3) if:

// 1. they come from same domain (case-insensitive),

// 2. have same name (case-insensitive),

// 3. and have same path (case-sensitive).

return equalsIgnoreCase(getName(), other.getName()) &&

equalsIgnoreCase(getDomain(), other.getDomain()) &&

Objects.equals(getPath(), other.getPath());

}

/**

@Override

public int hashCode() {

int h1 = name.toLowerCase(Locale.ROOT).hashCode();

int h2 = (domain!=null) ? domain.toLowerCase(Locale.ROOT).hashCode() : 0;

int h3 = (path!=null) ? path.hashCode() : 0;

return h1 + h2 + h3;

}

/**

@Override

public Object clone() {

try {

return super.clone();

} catch (CloneNotSupportedException e) {

throw new RuntimeException(e.getMessage());

}

}

// ---------------- Package private operations --------------

long getCreationTime() {

return whenCreated;

}

// ---------------- Private operations --------------

// Note -- disabled for now to allow full Netscape compatibility

// from RFC 2068, token special case characters

//

// private static final String tspecials = "()<>@,;:\\\"/[]?={} \t";

private static final String tspecials = ",; "; // deliberately includes space

/*

private static boolean isToken(String value) {

int len = value.length();

for (int i = 0; i < len; i++) {

char c = value.charAt(i);

if (c < 0x20 || c >= 0x7f || tspecials.indexOf(c) != -1)

return false;

}

return true;

}

/*

private static HttpCookie parseInternal(String header,

boolean retainHeader,

long currentTimeMillis)

{

HttpCookie cookie = null;

String namevaluePair = null;

if (currentTimeMillis == -1L)

currentTimeMillis = System.currentTimeMillis();

StringTokenizer tokenizer = new StringTokenizer(header, ";");

// there should always have at least on name-value pair;

// it's cookie's name

try {

namevaluePair = tokenizer.nextToken();

int index = namevaluePair.indexOf('=');

if (index != -1) {

String name = namevaluePair.substring(0, index).trim();

String value = namevaluePair.substring(index + 1).trim();

if (retainHeader)

cookie = new HttpCookie(name,

stripOffSurroundingQuote(value),

header, currentTimeMillis);

else

cookie = new HttpCookie(name,

stripOffSurroundingQuote(value),

null, currentTimeMillis);

} else {

// no "=" in name-value pair; it's an error

throw new IllegalArgumentException("Invalid cookie name-value pair");

}

} catch (NoSuchElementException ignored) {

throw new IllegalArgumentException("Empty cookie header string");

}

// Attributes that require special handling

String expiresValue = null;

String maxAgeValue = null;

// remaining name-value pairs are cookie's attributes

while (tokenizer.hasMoreTokens()) {

namevaluePair = tokenizer.nextToken();

int index = namevaluePair.indexOf('=');

String name, value;

if (index != -1) {

name = namevaluePair.substring(0, index).trim();

value = namevaluePair.substring(index + 1).trim();

} else {

name = namevaluePair.trim();

value = null;

}

if (name.equalsIgnoreCase("max-age") && maxAgeValue == null) {

maxAgeValue = value;

continue;

}

if (name.equalsIgnoreCase("expires") && expiresValue == null) {

expiresValue = value;

continue;

}

// assign attribute to cookie

assignAttribute(cookie, name, value);

}

assignMaxAgeAttribute(cookie, expiresValue, maxAgeValue);

return cookie;

}

/*

static interface CookieAttributeAssignor {

public void assign(HttpCookie cookie,

String attrName,

String attrValue);

}

static final java.util.Map<String, CookieAttributeAssignor> assignors =

new java.util.HashMap<>();

static {

assignors.put("comment", new CookieAttributeAssignor() {

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

if (cookie.getComment() == null)

cookie.setComment(attrValue);

}

});

assignors.put("commenturl", new CookieAttributeAssignor() {

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

if (cookie.getCommentURL() == null)

cookie.setCommentURL(attrValue);

}

});

assignors.put("discard", new CookieAttributeAssignor() {

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

cookie.setDiscard(true);

}

});

assignors.put("domain", new CookieAttributeAssignor(){

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

if (cookie.getDomain() == null)

cookie.setDomain(attrValue);

}

});

assignors.put("path", new CookieAttributeAssignor(){

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

if (cookie.getPath() == null)

cookie.setPath(attrValue);

}

});

assignors.put("port", new CookieAttributeAssignor(){

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

if (cookie.getPortlist() == null)

cookie.setPortlist(attrValue == null ? "" : attrValue);

}

});

assignors.put("secure", new CookieAttributeAssignor(){

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

cookie.setSecure(true);

}

});

assignors.put("httponly", new CookieAttributeAssignor(){

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

cookie.setHttpOnly(true);

}

});

assignors.put("version", new CookieAttributeAssignor(){

public void assign(HttpCookie cookie,

String attrName,

String attrValue) {

try {

int version = Integer.parseInt(attrValue);

cookie.setVersion(version);

} catch (NumberFormatException ignored) {

// Just ignore bogus version, it will default to 0 or 1

}

}

});

}

private static void assignMaxAgeAttribute(HttpCookie cookie,

String expiresValue,

String maxAgeValue)

{

if (cookie.getMaxAge() != MAX_AGE_UNSPECIFIED)

return;

if (expiresValue == null && maxAgeValue == null)

return;

// strip off the surrounding "-sign if there's any

expiresValue = stripOffSurroundingQuote(expiresValue);

maxAgeValue = stripOffSurroundingQuote(maxAgeValue);

try {