Refacto session cookie handling

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>

pkg/server/session/session.go

@@ -0,0 +1,110 @@
+// Copyright (c) 2025 Probo Inc <hello@getprobo.com>.
+//
+// Permission to use, copy, modify, and/or distribute this software for any
+// purpose with or without fee is hereby granted, provided that the above
+// copyright notice and this permission notice appear in all copies.
+//
+// THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH
+// REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
+// AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT,
+// INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
+// LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR
+// OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
+// PERFORMANCE OF THIS SOFTWARE.
+
+package session
+
+import (
+	"context"
+	"errors"
+	"net/http"
+
+	"github.com/getprobo/probo/pkg/coredata"
+	"github.com/getprobo/probo/pkg/gid"
+	"github.com/getprobo/probo/pkg/securecookie"
+	"github.com/getprobo/probo/pkg/usrmgr"
+)
+
+type AuthConfig struct {
+	CookieName   string
+	CookieSecret string
+}
+
+type AuthResult struct {
+	Session   *coredata.Session
+	User      *coredata.User
+	TenantIDs []gid.TenantID
+}
+
+type ErrorHandler struct {
+	OnCookieError  func(err error)
+	OnParseError   func(w http.ResponseWriter, authCfg AuthConfig)
+	OnSessionError func(w http.ResponseWriter, authCfg AuthConfig)
+	OnUserError    func(w http.ResponseWriter, authCfg AuthConfig)
+	OnTenantError  func(err error)
+}
+
+func TryAuth(
+	ctx context.Context,
+	w http.ResponseWriter,
+	r *http.Request,
+	usrmgrSvc *usrmgr.Service,
+	authCfg AuthConfig,
+	errorHandler ErrorHandler,
+) *AuthResult {
+	cookieValue, err := securecookie.Get(r, securecookie.DefaultConfig(
+		authCfg.CookieName,
+		authCfg.CookieSecret,
+	))
+	if err != nil {
+		if !errors.Is(err, securecookie.ErrCookieNotFound) && errorHandler.OnCookieError != nil {
+			errorHandler.OnCookieError(err)
+		}
+		return nil
+	}
+
+	sessionID, err := gid.ParseGID(cookieValue)
+	if err != nil {
+		if errorHandler.OnParseError != nil {
+			errorHandler.OnParseError(w, authCfg)
+		}
+		return nil
+	}
+
+	session, err := usrmgrSvc.GetSession(ctx, sessionID)
+	if err != nil {
+		if errorHandler.OnSessionError != nil {
+			errorHandler.OnSessionError(w, authCfg)
+		}
+		return nil
+	}
+
+	user, err := usrmgrSvc.GetUserBySession(ctx, sessionID)
+	if err != nil {
+		if errorHandler.OnUserError != nil {
+			errorHandler.OnUserError(w, authCfg)
+		}
+		return nil
+	}
+
+	tenantIDs, err := usrmgrSvc.ListTenantsForUserID(ctx, user.ID)
+	if err != nil {
+		if errorHandler.OnTenantError != nil {
+			errorHandler.OnTenantError(err)
+		}
+		return nil
+	}
+
+	return &AuthResult{
+		Session:   session,
+		User:      user,
+		TenantIDs: tenantIDs,
+	}
+}
+
+func ClearCookie(w http.ResponseWriter, authCfg AuthConfig) {
+	securecookie.Clear(w, securecookie.DefaultConfig(
+		authCfg.CookieName,
+		authCfg.CookieSecret,
+	))
+}