Add session object to HTTP library

[DartBot]

This issue was originally filed by TerryMit...@gmail.com

---

1:
In the current HttpHeaders implementation,
  response.headers.set("Set-Cookie", "text = HelloWorld");
  response.headers.add("Set-Cookie", "text = AnotherHelloWorld");
or
  response.headers.add("Set-Cookie", "text = HelloWorld");
  response.headers.add("Set-Cookie", "text = AnotherHelloWorld");
creates a single set-cookie header consists of comma separated two cookies (Set-Cookie folded) such as:
set-cookie: text = HelloWorld, text = AnotherHelloWorld

The recent RFC 6265 Section 3 says:
 Origin servers SHOULD NOT fold multiple Set-Cookie header fields into a single header field. The usual mechanism for folding HTTP headers fields (i.e., as defined in [RFC2616]) might change the semantics of the Set-Cookie header field because the %x2C (",") character is used by Set-Cookie in a way that conflicts with such folding.

For the view point of long term sustainability, it might be better to generate "Set-Cookie" headers one for each headers.set or headers.add call.

2:
I just completed a cookie based HttpSessionManager library which is almost equivalent to the HttpSession interface of Java Servlet. It works fine so far. It would be nice if dart:io had this kind of HttpSession interface (including URI rewrite based session also) and following methods were included in the HttpRequest interface:
 getSession
 getRequestedSessionId
 isRequestedSessionIdValid

To try my cookie based HttpSessionManager library:
(1) From https://gist.github.com/2755552, download, decompress and rename the folder like HttpSessionLibrary.
(2) Open the folder from Dart Editor.
(3) Run HttpSessionTestServer.dart or SimpleShoppingCartServer.dart as a server.
(4) Access the server from your browser as http://localhost:8080/SessionTest or http://localhost:8080/GooSushi

[sgjesse]

I r7943 (http://code.google.com/p/dart/source/detail?r=7943) support for cookies where added to the HTTP server. The change provides a Cookie class for representing cookies in both server and client. It also includes support for non-folding of specific headers (default for Set-Cookie).

---

Set owner to @sgjesse.
Added Area-IO, Triaged labels.

[DartBot]

This comment was originally written by TerryMit...@gmail.com

---

I am happy to know that the item 1 is already in progress.
 
Please consider to incorporate HttpSession into the dart:io as described in the item 2. Third party Http session mechanism cannot prevent the session ID (DSESSIONID) in a cookie header to be manipulated by the application.

[madsager]

Added this to the Later milestone.

[sgjesse]

Changed the title to: "Add session object to HTTP library".

[DartBot]

This comment was originally written by TerryMitsuok...@gmail.com

---

I deleted the Gist by mistake. New Gist (recent API changes incorporated) address is: https://gist.github.com/2941231

[sgjesse]

Set owner to @Skabet.
Added Started label.

[andersjohnsen]

Support for sessions have now been added to the HTTP server. See http://api.dartlang.org/docs/bleeding_edge/dart_io/HttpRequest.html#session for more info.

---

Removed this from the Later milestone.
Added this to the M2 milestone.
Added Fixed label.

[kevmoo]

Removed Area-IO label.
Added Area-Library, Library-IO labels.