File Coverage

blib/lib/RapidApp/CoreSchema/Result/Session.pm

Criterion	Covered	Total	%
statement	63	63	100.0
branch	14	22	63.6
condition	4	12	33.3
subroutine	18	18	100.0
pod	1	5	20.0
total	100	120	83.3

package RapidApp::CoreSchema::Result::Session;

use strict;
use warnings;

use Moose;
use MooseX::NonMoose;
use namespace::autoclean;
extends 'DBIx::Class::Core';

__PACKAGE__->table('session');

__PACKAGE__->add_columns(
   "id" => {
    data_type => "varchar",
    is_nullable => 0,
  },
  "session_data" => {
    data_type => "text",
    is_nullable => 1,
  },
  "expires" => {
    data_type => "integer",
    extra => { unsigned => 1 },
    is_nullable => 1,
  },
  "expires_ts" => {
    data_type => "datetime",
    datetime_undef_if_invalid => 1,
    is_nullable => 1,
  },
  "user_id" =>  {
    data_type => "integer",
    extra => { unsigned => 1 },
    is_nullable => 1,
  },
);

__PACKAGE__->set_primary_key('id');

__PACKAGE__->belongs_to(
  "user",
  "RapidApp::CoreSchema::Result::User",
  { id => "user_id" },
  {
    is_deferrable => 1,
    join_type     => "LEFT",
    on_delete     => "CASCADE",
    on_update     => "CASCADE",
  },
);

use DateTime;
use MIME::Base64;
use Storable;
use Try::Tiny;

sub insert {
  my $self = shift;
  $self->_set_extra_columns(@_);
  return $self->next::method;
}

use RapidApp::Util ':all';

around 'update' => sub {
  my ($orig,$self,@args) = @_;
  $self->_set_extra_columns(@args);

  # This is terrible, but there are situations in which the session handling logic
  # of the AuthCore + Session::Store::DBIC crazy straw will try to save a session
  # that is not in the database, but tells dbic that it is, and tries to update it,
  # which barfs. So, here are catching exceptions on update and trying to create
  # as a new row instead. This situation seems to happen when attempting to
  # authenticate during the course of another request, when there is no session but
  # the client browser has a session cookie. This is ugly but not all that unsafe,
  # since if update throws an exception, something is already terribly wrong
  try {
    $self->$orig
  }
  catch {
    $self = $self->result_source->resultset->create(
      { $self->get_columns }
    );
  };

  return $self
};

sub _set_extra_columns {
  my $self = shift;
  my $columns = shift;
	$self->set_inflated_columns($columns) if $columns;

  my $expires = $self->get_column('expires');
  $self->set_column( expires_ts => DateTime->from_epoch(
    epoch => $expires,
    time_zone => 'local'
  ) ) if ($expires);

  my $data = $self->decoded_session_data;
  if($data) {
    my $user_id = try{$data->{__user}{id}};
    $self->set_column( user_id => $user_id );
  }
}

sub decoded_session_data {
  my $self = shift;
  my $value = $self->get_column('session_data') or return undef;
  return try{ Storable::thaw(MIME::Base64::decode($value)) };
}


sub encode_set_session_data {
  my $self = shift;
  my $data = shift;

  die "encode_set_session_data(): first argument must be a HashRef"
    unless ($data && ref($data) eq 'HASH');

  $self->session_data( MIME::Base64::encode(Storable::nfreeze($data)) ) && return $self
}

sub set_encoded_session_keys {
  my $self = shift;
  my $new = shift;

  die "set_encoded_session_keys(): first argument must be a HashRef"
    unless ($new && ref($new) eq 'HASH');

  my $data = $self->decoded_session_data or die "Failed to get current encoded session data";

  $self->encode_set_session_data({ %$data, %$new }) && return $self
}

sub set_expires {
  my $self = shift;
  my $epoch = shift;
  die "set_expires(): requires valid unix epoch argument" unless (defined $epoch);
  die "set_expires(): supplied value '$epoch' is not a valid unix epoch" unless (
    ($epoch =~ /^\d+$/) && $epoch >= 0 && $epoch < 2**31
  );

  $self->set_encoded_session_keys({ __expires => $epoch });
  $self->expires($epoch);
  return $self
}


__PACKAGE__->load_components('+RapidApp::DBIC::Component::TableSpec');
__PACKAGE__->add_virtual_columns(
  expires_in => {
    data_type => "integer",
    is_nullable => 1,
    sql => sub {
      # this is exactly the same method (with time()) how
      # Catalyst::Plugin::Session::Store::DBIC is checking
      # the session
      'SELECT (self.expires - '.(time()).')'
    },
  },
);
__PACKAGE__->apply_TableSpec;

__PACKAGE__->TableSpec_set_conf(
  title => 'Session',
  title_multi => 'Sessions',
  iconCls => 'ra-icon-environment-network',
  multiIconCls => 'ra-icon-environment-network',
  display_column => 'id',
  priority_rel_columns => 1,
  columns => {
    id => {
      width => 300,
      allow_add => \0, allow_edit => \0,
    },
    session_data => {
      hidden => \1,
      renderer => 'Ext.ux.RapidApp.renderBase64'
    },
    user_id => { no_column => \1, no_multifilter => \1, no_quick_search => \1 },
    expires => {
      width => 100, hidden => \1,
      allow_add => \0, allow_edit => \0,
    },
    expires_ts => {
      allow_add => \0, allow_edit => \0,
      width => 130
    },
    expires_in => {
      width => 100,
      renderer => 'Ext.ux.RapidApp.renderSecondsElapsed'
    },
    user => { allow_add => \0, allow_edit => \0 },
  }
);

__PACKAGE__->meta->make_immutable;
1;