lukaszraczylo/traefikoidc
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/traefikoidc.git synced 2026-10-12 04:04:26 +00:00
Code Issues Packages Projects Releases Wiki Activity

Cleanup old cookies properly.

Browse Source
This commit is contained in:
lukaszraczylo
2025-01-21 17:09:48 +00:00
parent a462e44896
commit bf294569eb
1 changed files with 15 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
session.go
+15 -5
View File
@@ -26,11 +26,11 @@ func generateSecureRandomString(length int) string {
}
// Cookie names and configuration constants used for session management
var (
// Using random prefixes to make cookie names less predictable
mainCookieName = "_oidc_raczylo_m_" + generateSecureRandomString(8)
accessTokenCookie = "_oidc_raczylo_a_" + generateSecureRandomString(8)
refreshTokenCookie = "_oidc_raczylo_r_" + generateSecureRandomString(8)
const (
// Using fixed prefixes for consistent cookie naming across restarts
mainCookieName = "_oidc_raczylo_m"
accessTokenCookie = "_oidc_raczylo_a"
refreshTokenCookie = "_oidc_raczylo_r"
)
const (
@@ -435,6 +435,11 @@ func (sd *SessionData) expireAccessTokenChunks(w http.ResponseWriter) {
}
func (sd *SessionData) SetAccessToken(token string) {
// Expire any existing chunk cookies first
if sd.request != nil {
sd.expireAccessTokenChunks(nil) // Will be saved when Save() is called
}
// Clear and prepare chunks map for new token
sd.accessTokenChunks = make(map[int]*sessions.Session)
@@ -519,6 +524,11 @@ func (sd *SessionData) expireRefreshTokenChunks(w http.ResponseWriter) {
}
func (sd *SessionData) SetRefreshToken(token string) {
// Expire any existing chunk cookies first
if sd.request != nil {
sd.expireRefreshTokenChunks(nil) // Will be saved when Save() is called
}
// Clear and prepare chunks map for new token
sd.refreshTokenChunks = make(map[int]*sessions.Session)