feat: enhance session store security and configuration
- Add 30-day max age for session cookies - Enable HttpOnly flag - Set SameSite to strict mode
This commit is contained in:
7
main.go
7
main.go
@@ -146,8 +146,11 @@ func main() {
|
||||
// Initialize session store
|
||||
store := cookie.NewStore([]byte(common.SessionSecret))
|
||||
store.Options(sessions.Options{
|
||||
Path: "/",
|
||||
Secure: false,
|
||||
Path: "/",
|
||||
MaxAge: 2592000, // 30 days
|
||||
HttpOnly: true,
|
||||
Secure: false,
|
||||
SameSite: http.SameSiteStrictMode,
|
||||
})
|
||||
server.Use(sessions.Sessions("session", store))
|
||||
|
||||
|
||||
Reference in New Issue
Block a user