Cookie access?

imeshev · July 5, 2024, 11:27am

Folks, is there a way to set Cookies upon a successful log in? I understand Vaadin sets it’s own VaadinSavedRequestAwareAuthenticationSuccessHandler, which effectively prevents setting using a custom AuthenticationSuccessHandler that could be used for accessing the servlet request to manage the cookies using httpSecurity.successHandler(…).

Tatu2 · July 8, 2024, 11:40am

I have example of that in my Bookstore demo app, I am storing value to session attribute, and persisting the value to the cookie in a request handler.

github.com

TatuLund/bookstore-flow-ee/blob/v24/bookstore-starter-flow-ui/src/main/java/com/vaadin/samples/BookstoreInitListener.java

package com.vaadin.samples;

import java.io.Serializable;

import org.slf4j.Logger;

import com.vaadin.flow.server.ServiceInitEvent;

import jakarta.enterprise.context.Dependent;
import jakarta.enterprise.event.Observes;
import jakarta.inject.Inject;
import jakarta.servlet.http.Cookie;

/**
 * This class is used to listen to BeforeEnter event of all UIs in order to
 * check whether a user is signed in or not before allowing entering any page.
 * It is registered in a file named
 * com.vaadin.flow.server.VaadinServiceInitListener in META-INF/services.
 */
@SuppressWarnings("serial")

This file has been truncated. show original

In my case I have a language select in LoginView and the value is stored to cookie using this mechanism

github.com

TatuLund/bookstore-flow-ee/blob/v24/bookstore-starter-flow-ui/src/main/java/com/vaadin/samples/authentication/LoginView.java#L123


      
          loginInfoHeader = new H1(getTranslation(LOGIN_INFO));
          loginInfoHeader.setWidth("100%");
          loginInfoText = new Span(getTranslation(LOGIN_INFO_TEXT));
          loginInfoText.setWidth("100%");
          loginInformation.add(loginInfoHeader);
          loginInformation.add(loginInfoText);
          lang = new Select<>();
          lang.setItems(CustomI18NProvider.locales);
          lang.setItemLabelGenerator(item -> item.toString());
          loginInformation.add(lang);
          lang.addValueChangeListener(e -> {
              if (e.isFromClient()) {
                  getUI().ifPresent(ui -> {
                      ui.getSession().setAttribute("locale",
                              e.getValue().getLanguage());
                      ui.setLocale(e.getValue());
                      logger.info("Changing locale to {}",
                              e.getValue().getLanguage());
                  });
              }
          });

imeshev · July 10, 2024, 3:10pm

My challenge is manipulating cookies on a successful log in.

Matti · July 11, 2024, 7:48pm

If it is not an “httpOnly” cookie, I’d use BrowserCookie:

github.com

viritin/flow-viritin/blob/v24/src/main/java/org/vaadin/firitin/util/BrowserCookie.java

package org.vaadin.firitin.util;

import java.time.LocalDateTime;
import java.time.ZoneOffset;
import java.time.ZonedDateTime;
import java.time.format.DateTimeFormatter;
import java.util.Objects;

import com.vaadin.flow.component.HasValue;
import com.vaadin.flow.component.HasValue.ValueChangeEvent;
import com.vaadin.flow.component.UI;
import com.vaadin.flow.component.page.Page;

/**
 * A helper that provides access to browser cookies.
 *
 * @author Matti Tahvonen
 */
public class BrowserCookie {

This file has been truncated. show original

Tatu2 · July 15, 2024, 7:01am

That is exactly the same use case I have in the demo app where user can select language in LoginView and I persist the value to cookie.

imeshev · July 26, 2024, 12:54am

Understood. It looks like VaadinRequest.current() is the way to go. Thanks!