lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-17 04:37:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Clean up old cookies.

Browse Source
This commit is contained in:
lukaszraczylo
2025-01-21 00:03:13 +00:00
parent 061c12d0a3
commit 5eff0dc866
1 changed files with 27 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
session.go
+27 -7
View File
@@ -28,9 +28,9 @@ func generateSecureRandomString(length int) string {
// Cookie names and configuration constants used for session management // Cookie names and configuration constants used for session management
var ( var (
// Using random prefixes to make cookie names less predictable // Using random prefixes to make cookie names less predictable
mainCookieName = "_oidc_m_" + generateSecureRandomString(8) mainCookieName = "_oidc_raczylo_m_" + generateSecureRandomString(8)
accessTokenCookie = "_oidc_a_" + generateSecureRandomString(8) accessTokenCookie = "_oidc_raczylo_a_" + generateSecureRandomString(8)
refreshTokenCookie = "_oidc_r_" + generateSecureRandomString(8) refreshTokenCookie = "_oidc_raczylo_r_" + generateSecureRandomString(8)
) )
const ( const (
@@ -417,8 +417,18 @@ func (sd *SessionData) GetAccessToken() string {
// browser cookie size limits. Any existing token or chunks are cleared // browser cookie size limits. Any existing token or chunks are cleared
// before setting the new token. // before setting the new token.
func (sd *SessionData) SetAccessToken(token string) { func (sd *SessionData) SetAccessToken(token string) {
// Clear existing chunks // Expire any existing chunk cookies
sd.clearTokenChunks(sd.request, sd.accessTokenChunks) for i := 0; ; i++ {
sessionName := fmt.Sprintf("%s_%d", accessTokenCookie, i)
session, err := sd.manager.store.Get(sd.request, sessionName)
if err != nil || session.IsNew {
break
}
session.Options.MaxAge = -1
session.Values = make(map[interface{}]interface{})
}
// Clear existing chunks from memory
sd.accessTokenChunks = make(map[int]*sessions.Session) sd.accessTokenChunks = make(map[int]*sessions.Session)
// Compress token // Compress token
@@ -484,8 +494,18 @@ func (sd *SessionData) GetRefreshToken() string {
// browser cookie size limits. Any existing token or chunks are cleared // browser cookie size limits. Any existing token or chunks are cleared
// before setting the new token. // before setting the new token.
func (sd *SessionData) SetRefreshToken(token string) { func (sd *SessionData) SetRefreshToken(token string) {
// Clear existing chunks // Expire any existing chunk cookies
sd.clearTokenChunks(sd.request, sd.refreshTokenChunks) for i := 0; ; i++ {
sessionName := fmt.Sprintf("%s_%d", refreshTokenCookie, i)
session, err := sd.manager.store.Get(sd.request, sessionName)
if err != nil || session.IsNew {
break
}
session.Options.MaxAge = -1
session.Values = make(map[interface{}]interface{})
}
// Clear existing chunks from memory
sd.refreshTokenChunks = make(map[int]*sessions.Session) sd.refreshTokenChunks = make(map[int]*sessions.Session)
// Compress token // Compress token