Example 9-1. Getting cookie by name on a Node server

import http from 'http';

function getCookieByName(name, cookies) {
  for (let i = 0; i < cookies.length; i++) {
    let [key, value] = cookies[i].split('=');
    if (key === name) {
      return value;
    }
  }
}

http.createServer(function (request, response) {
  let someCookie = getCookieByName('some-cookie', request.headers.cookies);
  response.end('Hello World\n');
}).listen(8080);

Example 9-2. Getting cookie by name on the server using hapi

import Hapi from 'hapi';

const server = new Hapi.Server({
  debug: {
    request: ['error']
  }

  server.route({
    method: 'GET',
    path: {anything*},
    handler: (request, reply) => {
      let someCookie = request.state['some-cookie'];
      reply('Hello World\n');
    }
  });
});

server.start();

Example 9-3. Setting a cookie on a Node server

import http from 'http';

http.createServer(function (request, response) {
   response.writeHead(200, {
     'Set-Cookie': 'some-cookie=some value',
     'Content-Type': 'text/plain'
   });
  response.end('Hello World\n');
}).listen(8080);

Example 9-4. Setting cookie on the server using hapi

import Hapi from 'hapi';

const server = new Hapi.Server({
  debug: {
    request: ['error']
  }

  server.route({
    method: 'GET',
    path: {anything*},
    handler: (request, reply) => {
      reply('Hello World\n').state('some-cookie', 'some value');
    }
  });
});

server.start();

Example 9-5. Isomorphic cookie interface

class Cookie {

  // name (String): cookie name
  // value (String): cookie value
  // options.secure (Boolean): https only
  // options.expires (Number): expiration time in milliseconds
  // options.path (String): restrict cookie to a specific path
  // options.domain (String): restrict cookie to a specific domain
  // Returns: Undefined
  set(name, value, options = {}) {

  }

  // name (String): cookie name
  // Returns: cookie value (String); default null
  get(name) {

  }

}

Encoding Cookies

Technically cookies do not have to be encoded, other than semicolons, commas, and whitespace. But most implementations that you will see, especially on the client, URL-encode the values and names. The more important part is to encode and decode the values consistently across the client and the server, and to be careful not to double-encode values. These concerns are addressed in Example 9-6 and Example 9-7.

Example 9-6. Client cookie implementation, ./lib/cookie.client.js

import cookie from 'cookies-js';

export default {

  get(name) {
    return cookie.get(name) || undefined;
  },

  set(name, value, options = {}) {
    // convert milliseconds to seconds for cookies-js api
    if (options.expires) {
      options.expires / 1000;
    }
    cookie.set(name, value, options);
  }

}

Example 9-7. Server cookie implementation

export default function (request, reply) {

  // encoding functions http://www.rfc-editor.org/rfc/rfc6265.txt
  // follows same patterns as 'cookies-js' that is used on the client
  function cleanName(name) {
    name = name.replace(/[^#$&+\^`|]/g, encodeURIComponent);
    return name.replace(/\(/g, '%28').replace(/\)/g, '%29');
  }

  function cleanValue(value) {
    return (value + '').replace(/[^!#$&-+\--:<-\[\]-~]/g, encodeURIComponent);
  }

  return {

    get(name) {
      return request.state[name] && decodeURIComponent(request.state[name]) ||
        undefined;
    },

    set(name, value, options = {}) {
      reply.state(cleanName(name), cleanValue(value), {
        // use hapi defaults if values are falsy
        isSecure: options.secure || false,
        path: options.path || null,
        ttl: options.expires || null,
        domain: options.domain || null
      });
    }

  };

}

Example 9-8. Including the client cookie implementation in ./lib/index.client.js

// code omitted for brevity
import cookie from './cookie.client';
// code omitted for brevity

export default class Application {
  // code omitted for brevity
  navigate(url, push=true) {
    // code omitted for brevity
    const controller = new Controller({
      // parse search string into object
      query: query.parse(search),
      params: params,
      cookie: cookie
    });
    // code omitted for brevity
  }
  // code omitted for brevity
}

Example 9-9. Including the server cookie implementation in ./lib/index.js

import cookieFactory from './cookie';

export default class Application {
  // code omitted for brevity
  addRoute(path, Controller) {
    // code omitted for brevity
    const controller = new Controller({
      query: request.query,
      params: request.params,
      cookie: cookieFactory(request, reply)
    });
    // code omitted for brevity
  }
}

Example 9-10. Isomorphic set cookie example in HelloController class (Example 7-7) index method, ./src/HelloController.js

index(application, request, reply, callback) {
  this.context.cookie.set('random', '_' + (Math.floor(Math.random() * 1000) + 1),
  { path: '/' });
  callback(null);
}

Example 9-11. Redirecting on the client

window.location = 'http://theoatmeal.com/';
// OR
window.location.assign('http://theoatmeal.com/');

Example 9-12. Redirecting on a Node server

import http from 'http';

http.createServer(function (request, response) {
   response.writeHead(302, {
     'Location': 'http://theoatmeal.com/',
     'Content-Type': 'text/plain'
   });
  response.end('Hello World\n');
}).listen(8080);

Example 9-13. Redirecting on the server using hapi

import Hapi from 'hapi';

const server = new Hapi.Server({
  debug: {
    request: ['error']
  }

  server.route({
    method: 'GET',
    path: {anything*},
    handler: (request, reply) => {
      reply.redirect('http://theoatmeal.com/');
    }
  });
});

server.start();

Example 9-14. Redirecting on the client implementation (./src/lib/reply.js)

export default function (application) {

  const reply = function () {};

  reply.redirect = function (url) {
    application.navigate(url);
    return this;
  };

  reply.temporary = function () {
    return this;
  },

  reply.rewritable = function () {
    return this;
  },

  reply.permanent = function () {
    return this;
  }

  return reply;

}

Example 9-15. Including the client redirect implementation in ./lib/index.client.js

// code omitted for brevity
import replyFactory from './reply.client';
// code omitted for brevity

export default class Application {
  // code omitted for brevity
  navigate(url, push=true) {
    // code omitted for brevity
    const request = () => {};
    const reply = replyFactory(this);
    // code omitted for brevity
  }
  // code omitted for brevity
}

Example 9-16. HomeController class redirection example (./src/HomeController.js)

import Controller from './lib/Controller';

export default class HomeController extends Controller {

  index(application, request, reply, callback) {
    if (!this.context.cookie.get('greeting')) {
      this.context.cookie.set('greeting', '1', {
       expires: 1000 * 60 * 60 * 24 * 365 });
    }

    return reply.redirect('/hello');
  }

  toString(callback) {
    callback(null, 'I am the home page.');
  }

}