Documentation
¶
Index ¶
- Variables
- func BuildClearOidcStateCookieString(secure bool) string
- func BuildClearTokenCookieStringsFor(secure bool) []string
- func BuildOidcStateCookieString(value string, maxAgeInSeconds int, secure bool) string
- func BuildTokenCookieStringFor(maxAgeInSeconds int, token string, secure bool) string
- func ClearTokenCookie(w http.ResponseWriter, r *http.Request)
- func GetTokenCookie(r *http.Request) (string, error)
- func SecureCookieFromContext(ctx context.Context) bool
- func SecureCookieFromRequest(r *http.Request) bool
- func WithSecureCookieContext(ctx context.Context, secure bool) context.Context
Constants ¶
This section is empty.
Variables ¶
var ( TokenCookieName = "__Host-token" // #nosec G101: cookie name label, not a credential InsecureTokenCookieName = "token" // #nosec G101: cookie name label, not a credential OidcStateCookieName = "oidc_state" )
Functions ¶
func BuildClearOidcStateCookieString ¶
BuildClearOidcStateCookieString builds a Set-Cookie header string to clear the OIDC state cookie.
func BuildClearTokenCookieStringsFor ¶
BuildClearTokenCookieStringsFor builds Set-Cookie header strings to clear token cookies matching the current request security context. Secure contexts also clear the HTTP fallback cookie so stale sessions from older releases are flushed instead of being re-presented forever.
func BuildOidcStateCookieString ¶
BuildOidcStateCookieString builds a Set-Cookie header string for the OIDC state cookie.
func BuildTokenCookieStringFor ¶
BuildTokenCookieStringFor builds a Set-Cookie header string matching the current request security context. Callers must pass the trusted secure flag from SecureCookieFromContext / SecureCookieFromRequest so the cookie name (__Host-token vs. token) round-trips correctly behind HTTPS reverse proxies.
func ClearTokenCookie ¶
func ClearTokenCookie(w http.ResponseWriter, r *http.Request)
func SecureCookieFromContext ¶
SecureCookieFromContext returns the secure-cookie decision that router middleware derived from TLS or trusted proxy headers.
func SecureCookieFromRequest ¶
SecureCookieFromRequest returns true when the request was made over TLS or router middleware marked it as forwarded from HTTPS by a trusted proxy.
Types ¶
This section is empty.
Source Files