Set the user authentication cookie age to the default (end of browser

session) for non-persistent logins.  Expanded imports.


git-svn-id: https://samskivert.googlecode.com/svn/trunk@729 6335cc39-0255-0410-8fd6-9bcaacd3b74c

projects/samskivert/src/java/com/samskivert/servlet/user/UserManager.java

@@ -1,5 +1,5 @@
 //
-// $Id: UserManager.java,v 1.13 2002/05/02 19:10:34 shaper Exp $
+// $Id: UserManager.java,v 1.14 2002/05/08 00:25:54 shaper Exp $
 //
 // samskivert library - useful routines for java programs
 // Copyright (C) 2001 Michael Bayne
@@ -22,14 +22,18 @@ package com.samskivert.servlet.user;
 
 import java.net.URLEncoder;
 import java.util.Properties;
-import javax.servlet.http.*;
+import javax.servlet.http.Cookie;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
 
 import com.samskivert.Log;
 import com.samskivert.io.PersistenceException;
 import com.samskivert.jdbc.ConnectionProvider;
 import com.samskivert.servlet.RedirectException;
 import com.samskivert.servlet.util.RequestUtils;
-import com.samskivert.util.*;
+import com.samskivert.util.Interval;
+import com.samskivert.util.IntervalManager;
+import com.samskivert.util.StringUtil;
 
 /**
  * The user manager provides easy access to user objects for servlets. It
@@ -203,7 +207,8 @@ public class UserManager
      * @param username The username supplied by the user.
      * @param password The plaintext password supplied by the user.
      * @param persist If true, the cookie will expire in one month, if
-     * false, the cookie will expire in 24 hours.
+     * false, the cookie will expire at the end of the user's browser
+     * session.
      * @param rsp The response in which the cookie is to be set.
      * @param auth The authenticator used to check whether the user should
      * be authenticated.
@@ -228,11 +233,9 @@ public class UserManager
 	// stick it into a cookie for their browsing convenience
 	Cookie acookie = new Cookie(USERAUTH_COOKIE, authcode);
 	acookie.setPath("/");
-        if (persist) {
+        // expire in one month if persistent, else at the end of the
-            acookie.setMaxAge(30*24*60*60); // expire in one month
+        // session
-        } else {
+        acookie.setMaxAge((persist) ? (30*24*60*60) : -1);
-            acookie.setMaxAge(24*60*60); // expire in 24 hours
-        }
 	rsp.addCookie(acookie);
 
 	return user;

projects/samskivert/src/java/com/samskivert/servlet/user/UserRepository.java

@@ -1,5 +1,5 @@
 //
-// $Id: UserRepository.java,v 1.20 2002/04/30 00:52:31 mdb Exp $
+// $Id: UserRepository.java,v 1.21 2002/05/08 00:25:54 shaper Exp $
 //
 // samskivert library - useful routines for java programs
 // Copyright (C) 2001 Michael Bayne
@@ -20,17 +20,29 @@
 
 package com.samskivert.servlet.user;
 
-import java.sql.*;
+import java.sql.Connection;
+import java.sql.Date;
+import java.sql.ResultSet;
+import java.sql.SQLException;
+import java.sql.Statement;
+
 import java.util.ArrayList;
 import java.util.Calendar;
 import java.util.Properties;
 
-import org.apache.regexp.*;
+import org.apache.regexp.RE;
+import org.apache.regexp.RESyntaxException;
 
 import com.samskivert.Log;
 import com.samskivert.io.PersistenceException;
-import com.samskivert.jdbc.*;
+import com.samskivert.jdbc.ConnectionProvider;
-import com.samskivert.jdbc.jora.*;
+import com.samskivert.jdbc.DatabaseLiaison;
+import com.samskivert.jdbc.JDBCUtil;
+import com.samskivert.jdbc.JORARepository;
+import com.samskivert.jdbc.StaticConnectionProvider;
+import com.samskivert.jdbc.jora.Cursor;
+import com.samskivert.jdbc.jora.Session;
+import com.samskivert.jdbc.jora.Table;
 import com.samskivert.servlet.SiteIdentifier;
 import com.samskivert.util.HashIntMap;
 
@@ -292,10 +304,8 @@ public class UserRepository extends JORARepository
     /**
      * Creates a new session for the specified user and returns the
      * randomly generated session identifier for that session. Temporary
-     * sessions are set to expire in two days which prevents someone from
+     * sessions are set to expire at the end of the user's browser
-     * being screwed if they log in at 11:59pm, but also prevents them
+     * session. Persistent sessions expire after one month.
-     * from leaving their browser authenticated for too long. Persistent
-     * sessions expire after one month.
      */
     public String createNewSession (final User user, boolean persist)
 	throws PersistenceException