opensource/filestash
1
0
Fork 0
mirror of https://github.com/mickael-kerjean/filestash.git synced 2025-11-02 11:57:04 +08:00
Code Issues Packages Projects Releases Wiki Activity

improvement (cookie): leverage the 'SameSite' attribute

Browse Source
This commit is contained in:
Mickael KERJEAN
2018-12-19 21:13:08 +11:00
parent 1d5d836caa
commit e1b0eab5e1
3 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
server/ctrl/admin.go
View File

@ -67,6 +67,7 @@ func AdminSessionAuthenticate(ctx App, res http.ResponseWriter, req *http.Reques
Value: obfuscate,
Path: COOKIE_PATH_ADMIN,
MaxAge: 60*60, // valid for 1 hour
SameSite: http.SameSiteStrictMode,
})
SendSuccessResult(res, true)
}

5
server/ctrl/session.go
View File

@ -80,6 +80,7 @@ func SessionAuthenticate(ctx App, res http.ResponseWriter, req *http.Request) {
MaxAge: 60 * 60 * 24 * 30,
Path: COOKIE_PATH,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
}
http.SetCookie(res, &cookie)
@ -101,14 +102,14 @@ func SessionLogout(ctx App, res http.ResponseWriter, req *http.Request) {
http.SetCookie(res, &http.Cookie{
Name: COOKIE_NAME_AUTH,
Value: "",
Path: COOKIE_PATH,
MaxAge: -1,
Path: COOKIE_PATH,
})
http.SetCookie(res, &http.Cookie{
Name: COOKIE_NAME_ADMIN,
Value: "",
Path: COOKIE_PATH_ADMIN,
MaxAge: -1,
Path: COOKIE_PATH_ADMIN,
})
SendSuccessResult(res, nil)
}

1
server/ctrl/share.go
View File

@ -197,6 +197,7 @@ func ShareVerifyProof(ctx App, res http.ResponseWriter, req *http.Request) {
Path: COOKIE_PATH,
MaxAge: 60 * 60 * 24 * 30,
HttpOnly: true,
SameSite: http.SameSiteStrictMode,
}
http.SetCookie(res, &cookie)