public class CookieHelper extends Object
注意:在cookie的名或值中不能使用分号(;)、逗号(,)、等号(=)以及空格
| 限定符和类型 | 字段和说明 |
|---|---|
static int |
CLEAR_BROWSER_IS_CLOSED |
static int |
CLEAR_IMMEDIATELY_REMOVE |
| 构造器和说明 |
|---|
CookieHelper() |
| 限定符和类型 | 方法和说明 |
|---|---|
static void |
addCookie(javax.servlet.http.HttpServletResponse response,
String domain,
String path,
String name,
String value,
int maxAge,
boolean httpOnly,
boolean secured)
添加 Cookie
|
static void |
addHttpOnlyCookie(javax.servlet.http.HttpServletResponse response,
javax.servlet.http.Cookie cookie)
解决 servlet 3.0 以下版本不支持 HttpOnly
|
static void |
authJSESSIONID(javax.servlet.http.HttpServletRequest request,
String value)
防止伪造SESSIONID攻击.
|
static void |
clearAllCookie(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
String domain,
String path)
清除指定doamin的所有Cookie
|
static boolean |
clearCookieByName(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
String cookieName,
String domain,
String path)
根据cookieName清除指定Cookie
|
static void |
clearCookieByName(javax.servlet.http.HttpServletResponse response,
String cookieName)
根据 cookieName 清空 Cookie【默认域下】
|
static javax.servlet.http.Cookie |
findCookieByName(javax.servlet.http.HttpServletRequest request,
String cookieName)
根据cookieName获取Cookie
|
public static final int CLEAR_BROWSER_IS_CLOSED
public static final int CLEAR_IMMEDIATELY_REMOVE
public static void authJSESSIONID(javax.servlet.http.HttpServletRequest request,
String value)
防止伪造SESSIONID攻击. 用户登录校验成功销毁当前JSESSIONID. 创建可信的JSESSIONID
request - 当前HTTP请求value - 用户ID等唯一信息public static javax.servlet.http.Cookie findCookieByName(javax.servlet.http.HttpServletRequest request,
String cookieName)
根据cookieName获取Cookie
request - cookieName - Cookie namepublic static void clearCookieByName(javax.servlet.http.HttpServletResponse response,
String cookieName)
根据 cookieName 清空 Cookie【默认域下】
response - cookieName - public static void clearAllCookie(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
String domain,
String path)
清除指定doamin的所有Cookie
request - response - domain - Cookie所在的域path - Cookie 路径public static boolean clearCookieByName(javax.servlet.http.HttpServletRequest request,
javax.servlet.http.HttpServletResponse response,
String cookieName,
String domain,
String path)
根据cookieName清除指定Cookie
request - response - cookieName - cookie namedomain - Cookie所在的域path - Cookie 路径public static void addCookie(javax.servlet.http.HttpServletResponse response,
String domain,
String path,
String name,
String value,
int maxAge,
boolean httpOnly,
boolean secured)
添加 Cookie
response - domain - 所在域path - 域名路径name - 名称value - 内容maxAge - 生命周期参数httpOnly - 只读secured - Https协议下安全传输public static void addHttpOnlyCookie(javax.servlet.http.HttpServletResponse response,
javax.servlet.http.Cookie cookie)
解决 servlet 3.0 以下版本不支持 HttpOnly
response - HttpServletResponse类型的响应cookie - 要设置httpOnly的cookie对象