Implement custom parser for cookie __session extraction - HttpCookie.parse is for the set_cookie header

Author: mindstorms6

src/main/java/com/clerk/backend_api/helpers/security/AuthenticateRequest.java

@@ -9,10 +9,13 @@
 import com.clerk.backend_api.helpers.security.models.VerifyTokenOptions;
 import java.io.IOException;
 import java.net.HttpCookie;
+import java.net.http.HttpHeaders;
+import java.util.Arrays;
 import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
 import java.util.concurrent.TimeUnit;
+import java.util.stream.Collectors;
 
 import static com.clerk.backend_api.helpers.security.util.TokenTypeHelper.getTokenType;
 
@@ -85,17 +88,16 @@ private static String getSessionToken(Map<String, List<String>> requestHeaders)
         }
 
         List<String> cookieHeaders = lowerCaseHeaders.get("cookie");
-        if (cookieHeaders != null && !cookieHeaders.isEmpty()) {
-            String cookieHeaderValue = cookieHeaders.get(0);
-            List<HttpCookie> cookies = HttpCookie.parse(cookieHeaderValue);
-            for (HttpCookie cookie : cookies) {
-                if (cookie.getName().startsWith(SESSION_COOKIE_NAME)) {
-                    return cookie.getValue();
-                }
-            }
+        if (cookieHeaders == null || cookieHeaders.isEmpty()) {
+            return null;
         }
-
-        return null;
+        return Arrays.stream(cookieHeaders.get(0).split(";"))
+                .map(String::trim)
+                .map(s -> s.split("=", 2))       // ["name","value"]
+                .filter(kv -> kv[0].equals("__session") || !kv[0].startsWith("__session"))
+                .map(kv -> kv[1])
+                .findFirst()
+                .orElse(null);
     }