session

package

v0.8.0 Latest Latest Go to latest Published: Apr 27, 2026 License: Apache-2.0 Imports: 5 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/kube-bind/kube-bind

Links

Open Source Insights

Documentation ¶

Index ¶

Constants
Variables
func MakeCookie(req *http.Request, name string, value string, secure bool, ...) *http.Cookie
type State
type Store
type TokenInfo

Constants ¶

View Source

const PKCEVerifierTTL = 10 * time.Minute

Variables ¶

View Source

var ErrPKCEVerifierNotFound = fmt.Errorf("pkce verifier not found")

View Source

var ErrSessionNotFound = fmt.Errorf("session not found")

Functions ¶

func MakeCookie ¶

func MakeCookie(req *http.Request, name string, value string, secure bool, expiration time.Duration) *http.Cookie

Types ¶

type State ¶

type State struct {
	Token       TokenInfo `msgpack:"tok,omitempty"`
	SessionID   string    `msgpack:"sid,omitempty"`
	ClusterID   string    `msgpack:"cid,omitempty"`
	RedirectURL string    `msgpack:"red,omitempty"`
	CreatedAt   time.Time `msgpack:"cat,omitempty"`
	ExpiresAt   time.Time `msgpack:"eat,omitempty"`
}

State is the data stored on the clientside as a browser cookie. To be independent of the OIDC token sizes, it only stores the absolute minimum information required for this particular backend implementation. Especially when lots of groups and claims are involved, the tokens can grow to a size larger than allowed by browsers for cookies, and even compression would only be a small adhesive strip, not a solution.

func (*State) Encode ¶

func (s *State) Encode() ([]byte, error)

func (*State) IsExpired ¶ added in v0.7.0

func (s *State) IsExpired() bool

IsExpired checks if the session has expired

func (*State) SetExpiration ¶ added in v0.7.0

func (s *State) SetExpiration(duration time.Duration)

SetExpiration sets the session expiration time

type Store ¶ added in v0.7.0

type Store interface {
	Save(ctx context.Context, state *State) error
	Load(ctx context.Context, sessionID string) (*State, error)
	Delete(ctx context.Context, sessionID string) error
	SavePKCEVerifier(ctx context.Context, sessionID, verifier string) error
	LoadAndDeletePKCEVerifier(ctx context.Context, sessionID string) (string, error)
}

type TokenInfo ¶

type TokenInfo struct {
	Subject string   `msgpack:"sub,omitempty"`
	Issuer  string   `msgpack:"iss,omitempty"`
	Groups  []string `msgpack:"grp,omitempty"`
}

Source Files ¶

View all Source files

Directories ¶

Path	Synopsis
memory
redis

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL