35 lines
994 B
Go
35 lines
994 B
Go
package auth
|
|
|
|
import (
|
|
"net/http"
|
|
"time"
|
|
|
|
"github.com/alexedwards/scs/pgxstore"
|
|
"github.com/alexedwards/scs/v2"
|
|
"github.com/jackc/pgx/v5/pgxpool"
|
|
)
|
|
|
|
func NewSessionManager(pool *pgxpool.Pool, cookieName string, secure bool, idleHours int) *scs.SessionManager {
|
|
sm := scs.New()
|
|
sm.Store = pgxstore.New(pool)
|
|
sm.Lifetime = 7 * 24 * time.Hour
|
|
if idleHours <= 0 {
|
|
idleHours = 24
|
|
}
|
|
sm.IdleTimeout = time.Duration(idleHours) * time.Hour
|
|
sm.Cookie.Name = cookieName
|
|
sm.Cookie.HttpOnly = true
|
|
sm.Cookie.Secure = secure
|
|
sm.Cookie.SameSite = http.SameSiteLaxMode
|
|
sm.Cookie.Path = "/"
|
|
return sm
|
|
}
|
|
|
|
const (
|
|
SessionUserIDKey = "user_id"
|
|
SessionCompanyIDKey = "company_id"
|
|
SessionImpersonatorIDKey = "impersonator_id" // non-prod user switch: original admin/demo
|
|
SessionStaffHomeCompanyKey = "staff_home_company_id" // platform admin tenant switch: home company to revert to
|
|
SessionVersionKey = "session_version" // must match users.session_version
|
|
)
|