79 lines
1.6 KiB
Go

package auth
import (
"encoding/gob"
"log/slog"
"net/http"
"forge.cadoles.com/wpetit/clearcase/internal/core/model"
"github.com/gorilla/sessions"
"github.com/pkg/errors"
)
const userAttr = "u"
const tenantIDAttr = "t"
var errSessionNotFound = errors.New("session not found")
func init() {
gob.Register(&model.User{})
}
func (h *Handler) storeSessionUser(w http.ResponseWriter, r *http.Request, user *model.User) error {
sess, err := h.getSession(r)
if err != nil {
return errors.WithStack(err)
}
sess.Values[userAttr] = user
if err := sess.Save(r, w); err != nil {
return errors.WithStack(err)
}
return nil
}
func (h *Handler) retrieveSessionUser(r *http.Request) (*model.User, error) {
sess, err := h.getSession(r)
if err != nil {
return nil, errors.WithStack(err)
}
user, ok := sess.Values[userAttr].(*model.User)
if !ok {
return nil, errors.WithStack(errSessionNotFound)
}
return user, nil
}
func (h *Handler) getSession(r *http.Request) (*sessions.Session, error) {
sess, err := h.sessionStore.Get(r, h.sessionName)
if err != nil {
slog.ErrorContext(r.Context(), "could not retrieve session from store", slog.Any("error", errors.WithStack(err)))
return sess, errors.WithStack(errSessionNotFound)
}
return sess, nil
}
func (h *Handler) clearSession(w http.ResponseWriter, r *http.Request) error {
sess, err := h.getSession(r)
if err != nil && !errors.Is(err, errSessionNotFound) {
return errors.WithStack(err)
}
if sess == nil {
return nil
}
sess.Options.MaxAge = -1
if err := sess.Save(r, w); err != nil {
return errors.WithStack(err)
}
return nil
}