session

type CSRFOptions struct {
	// FieldName is the form field carrying the token, defaulting to _csrf.
	FieldName string
	// HeaderName is checked before the form field, defaulting to X-CSRF-Token.
	HeaderName string
	// Skipper exempts requests; by default paths under /api/ are skipped
	// because token-authenticated JSON APIs are not CSRF-prone.
	Skipper func(*gin.Context) bool
}

type Flash struct {
	// Kind store data used by this type.
	Kind string
	// Message store data used by this type.
	Message string
}

type Options struct {
	// Secret signs and encrypts the session cookie and must contain at least
	// 32 bytes. One secret drives both keys.
	Secret []byte
	// CookieName defaults to gin_kit_session.
	CookieName string
	// MaxAge defaults to seven days, in seconds.
	MaxAge int
	// Secure marks the cookie HTTPS-only; enable it outside development.
	Secure bool
	// Domain store data used by this type.
	Domain string
	// Path defaults to /.
	Path string
	// SameSite defaults to Lax.
	SameSite http.SameSite
}