mirror of
https://github.com/miniflux/v2.git
synced 2024-09-05 19:09:21 +02:00
This reverts commit 5ac55518ab
.
Google Authentication doesn't work when Cookies are using strict mode.
54 lines
1.1 KiB
Go
54 lines
1.1 KiB
Go
// Copyright 2017 Frédéric Guillot. All rights reserved.
|
|
// Use of this source code is governed by the Apache 2.0
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package cookie // import "miniflux.app/http/cookie"
|
|
|
|
import (
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
// Cookie names.
|
|
const (
|
|
CookieAppSessionID = "MinifluxAppSessionID"
|
|
CookieUserSessionID = "MinifluxUserSessionID"
|
|
|
|
// Cookie duration in days.
|
|
cookieDuration = 30
|
|
)
|
|
|
|
// New creates a new cookie.
|
|
func New(name, value string, isHTTPS bool, path string) *http.Cookie {
|
|
return &http.Cookie{
|
|
Name: name,
|
|
Value: value,
|
|
Path: basePath(path),
|
|
Secure: isHTTPS,
|
|
HttpOnly: true,
|
|
Expires: time.Now().Add(cookieDuration * 24 * time.Hour),
|
|
SameSite: http.SameSiteLaxMode,
|
|
}
|
|
}
|
|
|
|
// Expired returns an expired cookie.
|
|
func Expired(name string, isHTTPS bool, path string) *http.Cookie {
|
|
return &http.Cookie{
|
|
Name: name,
|
|
Value: "",
|
|
Path: basePath(path),
|
|
Secure: isHTTPS,
|
|
HttpOnly: true,
|
|
MaxAge: -1,
|
|
Expires: time.Date(1970, 1, 1, 0, 0, 0, 0, time.UTC),
|
|
SameSite: http.SameSiteLaxMode,
|
|
}
|
|
}
|
|
|
|
func basePath(path string) string {
|
|
if path == "" {
|
|
return "/"
|
|
}
|
|
return path
|
|
}
|