Systems and methods for handling a cookie from a server by an intermediary between the server and a client
This disclosure is directed to methods and systems for handling a cookie by an intermediary between a server and a client. An intermediary may receive a first request from a client for a web page of a server, and may incorporate code into a first fragment of the web page to include in a modified web page for presentation at the client. The code, upon execution, may transmit a predefined request from the client. The intermediary may receive a response from the server to the first request. The response may include a cookie and information about the cookie in a header section of the response. The intermediary may transmit to the client responsive to the predefined request, the cookie and a second fragment for inclusion in the modified web page. The second fragment may include the information about the cookie in a header section of the second fragment.
1. A method for handling a cookie from a server by an intermediary between the server and a client, comprising:
(a) receiving, by an intermediary between a client and a server, a first request from the client for a web page of the server;
(b) transmitting, by the intermediary the first request to the server;
(c) incorporating, by the intermediary, code into a first fragment of the web page and transmitting the first fragment to the client to be included in a modified web page for presentation at the client, wherein the code, upon execution as the first fragment is presented to a user of the client, transmits a predefined request from the client;
(d) receiving, by the intermediary, a response from the server to the first request, the response comprising a cookie and information about the cookie in a header section of the response;
(e) receiving, by the intermediary, the predefined request from the client and determining, according to an identifying element in the predefined request that associates the predefined request to the cookie, that the predefined request is for prompting the intermediary to transmit to the client the cookie and the information about the cookie received in the response from the server; and
(f) transmitting, by the intermediary to the client responsive to the determination, the cookie and a second fragment for inclusion in the modified web page, the second fragment including the information about the cookie in a header section of the second fragment.
2. The method of claim 1 , comprising determining, by the intermediary, that the server provides a HttpOnly cookie.
3. The method of claim 1 , comprising determining, by the intermediary, that the server provides a HttpOnly cookie based on a prior communication from the server.
4. The method of claim 1 , wherein (b) comprises incorporating code that, upon execution, requests a predefined resource from the server.
5. The method of claim 1 , further comprising associating, by the intermediary, the predefined request with the server's response comprising the information about the cookie.
6. The method of claim 1 , wherein (f) comprises transmitting the second fragment, the second fragment comprising a multipurpose internet mail extensions (MIME) multipart message.
7. The method of claim 1 , wherein (f) comprises transmitting the second fragment, the second fragment comprising a body section that is empty or having a one-pixel image.
8. A system for handling a cookie from a server by an intermediary between the server and a client, the system comprising:
code configured for executing on a client to transmit a predefined request from the client; and
an intermediary device, located between the client and a server, comprising:
one or more processors with executable instructions configured for:
receiving a first request from the client for a web page of the server;
transmitting the first request to the server;
incorporating the code into a first fragment of the web page and transmitting the first fragment to the client to be included in a modified web page for presentation at the client, wherein the code, upon execution as the first fragment is presented to a user of the client, transmits the predefined request;
receiving a response from the server to the first request, the response comprising a cookie and information about the cookie in a header section of the response;
receiving, by the intermediary, the predefined request from the client;
determining, according to an identifying element in the predefined request that associates the predefined request to the cookie, that the predefined request is for prompting the intermediary to transmit to the client the cookie and the information about the cookie received in the response from the server; and
transmitting to the client responsive to the determination, the cookie and a second fragment for inclusion in the modified web page, the second fragment including the information about the cookie in a header section of the second fragment.
9. The system of claim 8 , wherein the intermediary device determines that the server provides a HttpOnly cookie.
10. The system of claim 8 , wherein the intermediary device determines that the server provides a HttpOnly cookie based on a prior communication from the server.
11. The system of claim 8 , wherein the intermediary device incorporates code that, upon execution, requests a predefined resource from the server.
12. The system of claim 8 , wherein the intermediary device associates the predefined request with the server's response comprising the information about the cookie.
13. The system of claim 8 , wherein the intermediary device transmits the second fragment, the second fragment comprising a multipurpose internet mail extensions (MIME) multipart message.
14. The system of claim 8 , wherein the intermediary device transmits the second fragment, the second fragment comprising a body section that is empty or having a one-pixel image.