Documentation
¶
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ClearAuthState ¶
ClearAuthState removes a non-sensitive auth state cookie.
func SetAuthState ¶
SetAuthState stores a non-sensitive auth state cookie that client-side UI code may read, such as "logged in" hints.
func SetIdPReturn ¶ added in v0.10.0
SetIdPReturn stores a sensitive cookie that must come back on the request an identity provider sends the browser to after login, whatever session.same_site is configured: SameSite=Lax for a redirect (OIDC callback, a top-level GET). A SAML assertion arrives as a cross-site POST, which Lax cookies are not sent on, so post=true uses SameSite=None when the cookie is Secure; over plain HTTP, where browsers refuse SameSite=None, the attribute is left unset and the browser default applies.
Types ¶
This section is empty.
Source Files
Click to show internal directories.
Click to hide internal directories.