sashakoshka/step
sashakoshka/step
1
0
Fork 0
Code Issues 13 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

providers/session: Add option to set the domain of session cookies

Browse Source
This commit is contained in:
Sasha Koshka 2024-12-27 01:13:55 -05:00
parent b6e4c719ca
commit 47a66d53e7
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
providers/session/session.go
View File

@ -23,6 +23,7 @@ var _ step.Trimmer = new(Provider)
type Provider struct { type Provider struct {
Lifetime time.Duration Lifetime time.Duration
InsecureCookie bool InsecureCookie bool
CookieDomain string
sessions usync.RWLocker[sessionMap] sessions usync.RWLocker[sessionMap]
} }
@ -65,6 +66,9 @@ func (this *Provider) Configure (config step.Meta) error {
log.Println("!!! session.insecure-cookie is active, this is not recommended") log.Println("!!! session.insecure-cookie is active, this is not recommended")
} }
} }
if cookieDomainStr := config.Get("session.cookie-domain"); cookieDomainStr != "" {
this.CookieDomain = cookieDomainStr
}
return nil return nil
} }
@ -74,6 +78,7 @@ func (this *Provider) FuncMapFor (document *step.Document) template.FuncMap {
document: document, document: document,
sessions: &this.sessions, sessions: &this.sessions,
insecureCookie: this.InsecureCookie, insecureCookie: this.InsecureCookie,
cookieDomain: this.CookieDomain,
} }
return template.FuncMap { return template.FuncMap {
"sessionHTTP": stat.funcSessionHTTP, "sessionHTTP": stat.funcSessionHTTP,
@ -86,6 +91,7 @@ type state struct {
sessions *usync.RWLocker[sessionMap] sessions *usync.RWLocker[sessionMap]
lifetime time.Duration lifetime time.Duration
insecureCookie bool insecureCookie bool
cookieDomain string
} }
func (this *state) funcSessionHTTP ( func (this *state) funcSessionHTTP (
@ -129,6 +135,7 @@ func (this *state) funcSessionHTTP (
Expires: expiration, Expires: expiration,
SameSite: http.SameSiteStrictMode, SameSite: http.SameSiteStrictMode,
Path: "/", Path: "/",
Domain: this.cookieDomain,
} }
if !this.insecureCookie { if !this.insecureCookie {
cookie.Secure = true cookie.Secure = true