summaryrefslogtreecommitdiff
path: root/rt/html/Elements/SetupSessionCookie
blob: 63101af5a7195c7e2e3d116a12f811f92046811c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
%# BEGIN BPS TAGGED BLOCK {{{
%# 
%# COPYRIGHT:
%#  
%# This software is Copyright (c) 1996-2007 Best Practical Solutions, LLC 
%#                                          <jesse@bestpractical.com>
%# 
%# (Except where explicitly superseded by other copyright notices)
%# 
%# 
%# LICENSE:
%# 
%# This work is made available to you under the terms of Version 2 of
%# the GNU General Public License. A copy of that license should have
%# been provided with this software, but in any event can be snarfed
%# from www.gnu.org.
%# 
%# This work is distributed in the hope that it will be useful, but
%# WITHOUT ANY WARRANTY; without even the implied warranty of
%# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
%# General Public License for more details.
%# 
%# You should have received a copy of the GNU General Public License
%# along with this program; if not, write to the Free Software
%# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
%# 02110-1301 or visit their web page on the internet at
%# http://www.gnu.org/copyleft/gpl.html.
%# 
%# 
%# CONTRIBUTION SUBMISSION POLICY:
%# 
%# (The following paragraph is not intended to limit the rights granted
%# to you to modify and distribute this software under the terms of
%# the GNU General Public License and is only of importance to you if
%# you choose to contribute your changes and enhancements to the
%# community by submitting them to Best Practical Solutions, LLC.)
%# 
%# By intentionally submitting any modifications, corrections or
%# derivatives to this work, or any other work intended for use with
%# Request Tracker, to Best Practical Solutions, LLC, you confirm that
%# you are the copyright holder for those contributions and you grant
%# Best Practical Solutions,  LLC a nonexclusive, worldwide, irrevocable,
%# royalty-free, perpetual, license to use, copy, create derivative
%# works based on those contributions, and sublicense and distribute
%# those contributions and any derivatives thereof.
%# 
%# END BPS TAGGED BLOCK }}}
<%init>
return if $m->is_subrequest; # avoid reentrancy, as suggested by masonbook

my %cookies    = CGI::Cookie->fetch();
my $cookiename = "RT_SID_" . $RT::rtname . "." . $ENV{'SERVER_PORT'};
$SessionCookie ||= $cookies{$cookiename} ? $cookies{$cookiename}->value : undef;

my %backends   = (
    mysql => 'Apache::Session::MySQL',
    Pg    => 'Apache::Session::Postgres',

    #    Oracle	=> 'Apache::Session::Oracle',
);

my $session_class = $RT::WebSessionClass
    || $backends{$RT::DatabaseType}
    || 'Apache::Session::File';
my $pm = "$session_class.pm";
$pm =~ s|::|/|g;
require $pm;

# morning bug avoidance attempt -- pdh 20030815
unless ( $RT::Handle->dbh && $RT::Handle->dbh->ping ) {
    $RT::Handle->Connect();
}

my $session_properties;
if ( $session_class eq 'Apache::Session::File' ) {
    $session_properties = {
        Directory     => $RT::MasonSessionDir,
        LockDirectory => $RT::MasonSessionDir,
        Transaction => 1
    };
} else {
    $session_properties = {
        Handle     => $RT::Handle->dbh,
        LockHandle => $RT::Handle->dbh,
        Transaction => 1
    };
}

eval {
    tie %session, $session_class, $SessionCookie, $session_properties
};
if ($@) {

    # If the session is invalid, create a new session.
    eval {
        tie %session, $session_class, undef, $session_properties;
        undef $cookies{$cookiename};
    };
}

if ($@) {
    die loc("RT couldn't store your session.") . "\n"
        . loc(
        "This may mean that that the directory '[_1]' isn't writable or a database table is missing or corrupt.",
        $RT::MasonSessionDir
        )
        . "\n\n"
        . $@;
}

if ( !$cookies{$cookiename} ) {
    my $cookie = new CGI::Cookie(
        -name  => $cookiename,
        -value => $session{_session_id},
        -path  => $RT::WebPath,
        -secure => ($RT::WebSecureCookies ? 1 :0)
    );
    $r->headers_out->{'Set-Cookie'} = $cookie->as_string;

}

return ();
</%init>
<%args>
$SessionCookie => undef
</%args>