Increase cookie authentication IP length to 45->1000 characters

Affects issues:
- Fixed #4654

Author: AuroraLS3

Plan/common/src/main/java/com/djrapitops/plan/delivery/webserver/auth/CookieAuthentication.java

@@ -18,9 +18,12 @@
 
 import com.djrapitops.plan.delivery.domain.auth.User;
 import com.djrapitops.plan.utilities.dev.Untrusted;
+import org.apache.commons.lang3.StringUtils;
 
 import java.util.Objects;
 
+import static com.djrapitops.plan.storage.database.sql.tables.CookieTable.MAX_IP_ADDRESS_LENGTH;
+
 public class CookieAuthentication implements Authentication {
 
     private final ActiveCookieStore activeCookieStore;
@@ -32,7 +35,7 @@ public class CookieAuthentication implements Authentication {
     public CookieAuthentication(ActiveCookieStore activeCookieStore, @Untrusted String cookie, @Untrusted String accessAddress) {
         this.activeCookieStore = activeCookieStore;
         this.cookie = cookie;
-        this.accessAddress = accessAddress;
+        this.accessAddress = StringUtils.truncate(accessAddress, MAX_IP_ADDRESS_LENGTH);
     }
 
     @Override

Plan/common/src/main/java/com/djrapitops/plan/delivery/webserver/auth/CookieMetadata.java

@@ -17,9 +17,12 @@
 package com.djrapitops.plan.delivery.webserver.auth;
 
 import com.djrapitops.plan.delivery.domain.auth.User;
+import org.apache.commons.lang3.StringUtils;
 
 import java.util.Objects;
 
+import static com.djrapitops.plan.storage.database.sql.tables.CookieTable.MAX_IP_ADDRESS_LENGTH;
+
 /**
  * @author AuroraLS3
  */
@@ -48,7 +51,7 @@ public void setExpires(long expires) {
     }
 
     public String getIpAddress() {
-        return ipAddress;
+        return StringUtils.truncate(ipAddress, MAX_IP_ADDRESS_LENGTH);
     }
 
     @Override

Plan/common/src/main/java/com/djrapitops/plan/storage/database/Patches.java

@@ -90,7 +90,8 @@ public static Patch[] getAll(PluginLogger logger, PlanConfig config) {
                 new TPSTableMSPTPatch(),
                 new AllowlistIncorrectUniqueConstraintPatch(),
                 new TPSTableIdPatch(),
-                new DeleteUrlOpenEventsFromExtensionComponentsPatch()
+                new DeleteUrlOpenEventsFromExtensionComponentsPatch(),
+                new CookieTableIPLengthPatch()
         };
     }
 }

Plan/common/src/main/java/com/djrapitops/plan/storage/database/sql/tables/CookieTable.java

@@ -29,6 +29,8 @@
  */
 public class CookieTable {
 
+    public static final int MAX_IP_ADDRESS_LENGTH = 1000;
+
     public static final String TABLE_NAME = "plan_cookies";
 
     public static final String ID = "id";
@@ -64,7 +66,7 @@ public static String createTableSQL(DBType dbType) {
                 .column(WEB_USERNAME, Sql.varchar(100)).notNull()
                 .column(EXPIRES, Sql.LONG).notNull()
                 .column(COOKIE, Sql.varchar(64)).notNull()
-                .column(IP_ADDRESS, Sql.varchar(45)) // Max IPv6 text length 45 chars
+                .column(IP_ADDRESS, Sql.varchar(MAX_IP_ADDRESS_LENGTH)) // Max IPv6 text length 45 chars
                 .toString();
     }
 }

Plan/common/src/main/java/com/djrapitops/plan/storage/database/transactions/events/CookieChangeTransaction.java

@@ -26,6 +26,8 @@
 import java.sql.PreparedStatement;
 import java.sql.SQLException;
 
+import static com.djrapitops.plan.storage.database.sql.tables.CookieTable.MAX_IP_ADDRESS_LENGTH;
+
 public class CookieChangeTransaction extends Transaction {
 
     private final String username;
@@ -102,7 +104,7 @@ public void prepare(PreparedStatement statement) throws SQLException {
                     statement.setString(1, username);
                     statement.setString(2, cookie);
                     statement.setLong(3, expires);
-                    statement.setString(4, ipAddress);
+                    statement.setString(4, StringUtils.truncate(ipAddress, MAX_IP_ADDRESS_LENGTH));
                 }
             });
         }

Plan/common/src/main/java/com/djrapitops/plan/storage/database/transactions/patches/CookieTableIPLengthPatch.java

@@ -0,0 +1,34 @@
+/*
+ *  This file is part of Player Analytics (Plan).
+ *
+ *  Plan is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU Lesser General Public License v3 as published by
+ *  the Free Software Foundation, either version 3 of the License, or
+ *  (at your option) any later version.
+ *
+ *  Plan is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU Lesser General Public License for more details.
+ *
+ *  You should have received a copy of the GNU Lesser General Public License
+ *  along with Plan. If not, see <https://www.gnu.org/licenses/>.
+ */
+package com.djrapitops.plan.storage.database.transactions.patches;
+
+import com.djrapitops.plan.storage.database.DBType;
+import com.djrapitops.plan.storage.database.sql.building.Sql;
+import com.djrapitops.plan.storage.database.sql.tables.CookieTable;
+
+public class CookieTableIPLengthPatch extends Patch {
+    @Override
+    public boolean hasBeenApplied() {
+        return dbType == DBType.SQLITE || // SQLite does not limit varchar lengths
+                columnVarcharLength(CookieTable.TABLE_NAME, CookieTable.IP_ADDRESS) >= CookieTable.MAX_IP_ADDRESS_LENGTH;
+    }
+
+    @Override
+    protected void applyPatch() {
+        execute("ALTER TABLE " + CookieTable.TABLE_NAME + " MODIFY " + CookieTable.IP_ADDRESS + " " + Sql.varchar(CookieTable.MAX_IP_ADDRESS_LENGTH));
+    }
+}