Class CookieSessionStore

  • All Implemented Interfaces:
    io.vertx.lang.rx.RxDelegate

    public class CookieSessionStore
    extends SessionStore
    implements io.vertx.lang.rx.RxDelegate
    A SessionStore that uses a Cookie to store the session data. All data is stored in encrypted form using AES-256 with AES/GCM/NoPadding.

    NOTE: This class has been automatically generated from the original non RX-ified interface using Vert.x codegen.

    • Field Detail

      • DEFAULT_SESSIONID_LENGTH

        public static final int DEFAULT_SESSIONID_LENGTH
        Default length for a session id. More info: https://www.owasp.org/index.php/Session_Management_Cheat_Sheet
        See Also:
        Constant Field Values
    • Constructor Detail

      • CookieSessionStore

        public CookieSessionStore​(Object delegate)
    • Method Detail

      • create

        @Deprecated
        public static CookieSessionStore create​(Vertx vertx,
                                                String secret,
                                                Buffer salt)
        Deprecated.
        Parameters:
        vertx - a vert.x instance
        secret - a secret to derive a secure private key
        salt - ignored
        Returns:
        the store
      • create

        public static CookieSessionStore create​(Vertx vertx,
                                                String secret)
        Creates a CookieSessionStore. Cookie data will be encrypted using the given secret. The secret as the name reflects, should never leave the server, otherwise user agents could tamper with the payload. The choice of GCM, ensures that no (IV, Key) is reusable, which means that there is no need for a salt. Also encrypting the same session multiple times will render different outputs, which prevents rainbow attacks.
        Parameters:
        vertx - a vert.x instance
        secret - a secret to derive a secure private key
        Returns:
        the store