sessionguard

package

v0.6.20 Latest Latest Go to latest Published: Dec 6, 2024 License: AGPL-3.0 Imports: 14 Imported by: 2

Details

View Source

const InvalidIPAddress = `invalid ip address`

This section is empty.

func EnvKey(ctx echo.Context, dontCheckUA bool) string

func GetLastLoginInfo(ctx echo.Context, ownerType string, ownerId uint64, sessionId string) (*dbschema.NgingLoginLog, error)

func IgnoreBrowserUA(ctx echo.Context)

func Unpack(ctx echo.Context, encrypted string) (password string, err error)

func UnsetSession(ctx echo.Context, ownerType string)

func Validate(ctx echo.Context, lastIP string, ownerType string, ownerId uint64) bool

Validate 验证 session 环境是否安全，避免 cookie 和 session id 被窃取在非匿名模式下 UserAgent 和 IP 归属地与登录时的一致

func VerifyEnvKey(ctx echo.Context, envKey string, dontCheckTime bool, dontCheckUA bool) error

type Environment struct {
	UserAgent string                 `json:"ua"`
	Location  ip2regionparser.IpInfo `json:"loc"`
}

func GetEnvFromSession(ctx echo.Context, ownerType string) *Environment

func (e *Environment) SetSession(ctx echo.Context, ownerType string)

type PE struct {
	Password  string `json:"p"`
	EnvKey    string `json:"e"`
	Timestamp int64  `json:"t"`
}

func (p *PE) Verify(ctx echo.Context) error