rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use signed cookie

Browse Source 
Signed-off-by: gearnode <bryan@frimin.fr>
This commit is contained in:
gearnode
2025-03-06 08:33:38 +01:00
parent 13153e8f85
commit d4723024a0
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkg/api/console/v1/cookie.go
View File

@@ -6,9 +6,12 @@ import (
// setSessionCookie sets a session cookie in the response // setSessionCookie sets a session cookie in the response
func setSessionCookie(w http.ResponseWriter, sessionID string, cfg AuthConfig) { func setSessionCookie(w http.ResponseWriter, sessionID string, cfg AuthConfig) {
// Sign the session ID
signedValue := signCookieValue(sessionID, cfg.CookieSecret)
cookie := &http.Cookie{ cookie := &http.Cookie{
Name: cfg.CookieName, Name: cfg.CookieName,
Value: sessionID, Value: signedValue,
Path: cfg.CookiePath, Path: cfg.CookiePath,
Domain: cfg.CookieDomain, Domain: cfg.CookieDomain,
Secure: cfg.CookieSecure, Secure: cfg.CookieSecure,