org.zaproxy.zap.session

Class CookieBasedSessionManagementHelper

java.lang.Object

org.zaproxy.zap.session.CookieBasedSessionManagementHelper

public class CookieBasedSessionManagementHelper
extends Object

Helper for Cookie-based session management.

Constructor Summary

Constructors

Constructor and Description
CookieBasedSessionManagementHelper()

Method Summary

Modifier and Type	Method and Description
static HttpSession	getMatchingHttpSession(Collection<HttpSession> sessions, List<HttpCookie> cookies, HttpSessionTokensSet siteTokens) Gets the matching http session, if any, for a particular message containing a list of cookies, from a set of sessions.
static void	processMessageToMatchSession(HttpMessage message, HttpSession session) Modifies a message so its Request Header/Body matches the web session provided.
static void	processMessageToMatchSession(HttpMessage message, List<HttpCookie> requestCookies, HttpSession session) Modifies a message so its Request Header/Body matches the web session provided.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

CookieBasedSessionManagementHelper

public CookieBasedSessionManagementHelper()

Method Detail

processMessageToMatchSession

public static void processMessageToMatchSession(HttpMessage message,
                                                HttpSession session)

Modifies a message so its Request Header/Body matches the web session provided.

Parameters:

message - the message

session - the session

processMessageToMatchSession

public static void processMessageToMatchSession(HttpMessage message,
                                                List<HttpCookie> requestCookies,
                                                HttpSession session)

Modifies a message so its Request Header/Body matches the web session provided.

Parameters:

message - the message

requestCookies - a pre-computed list with the request cookies (for optimization reasons)

session - the session

getMatchingHttpSession

public static HttpSession getMatchingHttpSession(Collection<HttpSession> sessions,
                                                 List<HttpCookie> cookies,
                                                 HttpSessionTokensSet siteTokens)

Gets the matching http session, if any, for a particular message containing a list of cookies, from a set of sessions.

Parameters:

sessions - the existing sessions

cookies - the cookies present in the request header of the message

siteTokens - the tokens

Returns:

the matching http session, if any, or null if no existing session was found to match all the tokens