thinkjs/lib/Lib/Core/Session.class.js

var crypto = require('crypto');

var uid = function(length){
    var ratio = Math.log(64) / Math.log(256);
    var numbytes = Math.ceil(length * ratio);
    var str = crypto.randomBytes(numbytes).toString('base64').slice(0, length);
    return str.replace(/\+/g, '_').replace(/\//g, '-');
};
var cookie_sign = function(val, secret){
    secret = crypto.createHmac('sha256', secret).update(val).digest('base64');
    secret = secret.replace(/\=+$/, '');
    return val + '.' + secret;
};
var cookie_unsign = function(val, secret){
    var str = val.slice(0, val.lastIndexOf('.'));
    return cookie_sign(str, secret) === val ? str : false;
}

module.exports = Class(function(){
    return {
        init: function(){

        },
        get: function(){

        },
        set: function(){

        }
    }
});
module.exports.start = function(){
    var name = C('session_id');
    var secret = C('session_cookie_sign');
    var cookie = __http.req.cookie[name];
    if (cookie && secret) {
        cookie = cookie_unsign(cookie, secret);
    };
    if (!cookie) {
        cookie = uid(32);
        if (secret) {
            cookie = cookie_sign(cookie, secret);
        };
        __http.req.cookie[name] = cookie;
        __http.res.setCookie(name, cookie, C('session_options'));
    };
    C('session_cookie_value', cookie);
    return cookie;
}
module.exports.cookie_sign = cookie_sign;
module.exports.cookie_unsign = cookie_unsign;