wai-extra- Provides some basic WAI handlers and middleware.Source codeContentsIndex
Generating keys
clientsession :: [ByteString] -> Word256 -> Int -> ([(ByteString, ByteString)] -> Application) -> Request -> IO Response
type Word256 = LargeKey Word64 Word192
defaultKeyFile :: String
getKey :: FilePath -> IO Word256
getDefaultKey :: IO Word256
:: [ByteString]list of cookies to intercept
-> Word256encryption key
-> Intminutes to live
-> [(ByteString, ByteString)] -> Application
-> Request
-> IO Response

Automatic encrypting and decrypting of client session data.

Using the clientsession package, this middleware handles automatic encryption, decryption, checking, expiration and renewal of whichever cookies you ask it to. For example, if you tell it to deal with the cookie "IDENTIFIER", it will do the following:

  • When you specify an "IDENTIFIER" value in your Response, it will encrypt the value, along with the session expiration date and the REMOTE_HOST of the user. It will then be set as a cookie on the client.
  • When there is an incoming "IDENTIFIER" cookie from the user, it will decrypt it and check both the expiration date and the REMOTE_HOST. If everything matches up, it will set the "IDENTIFIER" value in hackHeaders.
  • If the client sent an "IDENTIFIER" and the application does not set a new value, this will reset the cookie to a new expiration date. This way, you do not have sessions timing out every 20 minutes.

As far as security: clientsesion itself handles hashing and encrypting the data to make sure that the user can neither see not tamper with it.

Generating keys
type Word256 = LargeKey Word64 Word192Source
defaultKeyFile :: StringSource
The default key file.
:: FilePathFile name where key is stored.
-> IO Word256The actual 256-bit key.
Get a 256-bit key from the given text file. If the file does not exist, or did not contain enough bits, a random key will be generated and stored in that file.
getDefaultKey :: IO Word256Source
Simply calls getKey "client_session_key.aes"
Produced by Haddock version 2.6.1