feat: enhance session store security and configuration
- Add 30-day max age for session cookies - Enable HttpOnly flag - Set SameSite to strict mode
This commit is contained in:
7
main.go
7
main.go
@@ -146,8 +146,11 @@ func main() {
|
|||||||
// Initialize session store
|
// Initialize session store
|
||||||
store := cookie.NewStore([]byte(common.SessionSecret))
|
store := cookie.NewStore([]byte(common.SessionSecret))
|
||||||
store.Options(sessions.Options{
|
store.Options(sessions.Options{
|
||||||
Path: "/",
|
Path: "/",
|
||||||
Secure: false,
|
MaxAge: 2592000, // 30 days
|
||||||
|
HttpOnly: true,
|
||||||
|
Secure: false,
|
||||||
|
SameSite: http.SameSiteStrictMode,
|
||||||
})
|
})
|
||||||
server.Use(sessions.Sessions("session", store))
|
server.Use(sessions.Sessions("session", store))
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user