You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
137 lines
3.7 KiB
137 lines
3.7 KiB
package sessionstore
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/base32"
|
|
"encoding/gob"
|
|
"github.com/cloudreve/Cloudreve/v3/pkg/cache"
|
|
"github.com/gorilla/securecookie"
|
|
"github.com/gorilla/sessions"
|
|
"net/http"
|
|
"strings"
|
|
)
|
|
|
|
type kvStore struct {
|
|
Codecs []securecookie.Codec
|
|
Options *sessions.Options
|
|
DefaultMaxAge int
|
|
|
|
prefix string
|
|
serializer SessionSerializer
|
|
store cache.Driver
|
|
}
|
|
|
|
func newKvStore(prefix string, store cache.Driver, keyPairs ...[]byte) *kvStore {
|
|
return &kvStore{
|
|
prefix: prefix,
|
|
store: store,
|
|
DefaultMaxAge: 60 * 20,
|
|
serializer: GobSerializer{},
|
|
Codecs: securecookie.CodecsFromPairs(keyPairs...),
|
|
Options: &sessions.Options{
|
|
Path: "/",
|
|
MaxAge: 86400 * 30,
|
|
},
|
|
}
|
|
}
|
|
|
|
// Get returns a session for the given name after adding it to the registry.
|
|
//
|
|
// It returns a new session if the sessions doesn't exist. Access IsNew on
|
|
// the session to check if it is an existing session or a new one.
|
|
//
|
|
// It returns a new session and an error if the session exists but could
|
|
// not be decoded.
|
|
func (s *kvStore) Get(r *http.Request, name string) (*sessions.Session, error) {
|
|
return sessions.GetRegistry(r).Get(s, name)
|
|
}
|
|
|
|
// New returns a session for the given name without adding it to the registry.
|
|
//
|
|
// The difference between New() and Get() is that calling New() twice will
|
|
// decode the session data twice, while Get() registers and reuses the same
|
|
// decoded session after the first call.
|
|
func (s *kvStore) New(r *http.Request, name string) (*sessions.Session, error) {
|
|
var (
|
|
err error
|
|
)
|
|
session := sessions.NewSession(s, name)
|
|
// make a copy
|
|
options := *s.Options
|
|
session.Options = &options
|
|
session.IsNew = true
|
|
if c, errCookie := r.Cookie(name); errCookie == nil {
|
|
err = securecookie.DecodeMulti(name, c.Value, &session.ID, s.Codecs...)
|
|
if err == nil {
|
|
res, ok := s.store.Get(s.prefix + session.ID)
|
|
if ok {
|
|
err = s.serializer.Deserialize(res.([]byte), session)
|
|
}
|
|
|
|
session.IsNew = !(err == nil && ok) // not new if no error and data available
|
|
}
|
|
}
|
|
return session, err
|
|
}
|
|
func (s *kvStore) Save(r *http.Request, w http.ResponseWriter, session *sessions.Session) error {
|
|
// Marked for deletion.
|
|
if session.Options.MaxAge <= 0 {
|
|
if err := s.store.Delete([]string{session.ID}, s.prefix); err != nil {
|
|
return err
|
|
}
|
|
http.SetCookie(w, sessions.NewCookie(session.Name(), "", session.Options))
|
|
} else {
|
|
// Build an alphanumeric key for the redis store.
|
|
if session.ID == "" {
|
|
session.ID = strings.TrimRight(base32.StdEncoding.EncodeToString(securecookie.GenerateRandomKey(32)), "=")
|
|
}
|
|
|
|
b, err := s.serializer.Serialize(session)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
age := session.Options.MaxAge
|
|
if age == 0 {
|
|
age = s.DefaultMaxAge
|
|
}
|
|
|
|
if err := s.store.Set(s.prefix+session.ID, b, age); err != nil {
|
|
return err
|
|
}
|
|
|
|
encoded, err := securecookie.EncodeMulti(session.Name(), session.ID, s.Codecs...)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
http.SetCookie(w, sessions.NewCookie(session.Name(), encoded, session.Options))
|
|
}
|
|
return nil
|
|
}
|
|
|
|
// SessionSerializer provides an interface hook for alternative serializers
|
|
type SessionSerializer interface {
|
|
Deserialize(d []byte, ss *sessions.Session) error
|
|
Serialize(ss *sessions.Session) ([]byte, error)
|
|
}
|
|
|
|
// GobSerializer uses gob package to encode the session map
|
|
type GobSerializer struct{}
|
|
|
|
// Serialize using gob
|
|
func (s GobSerializer) Serialize(ss *sessions.Session) ([]byte, error) {
|
|
buf := new(bytes.Buffer)
|
|
enc := gob.NewEncoder(buf)
|
|
err := enc.Encode(ss.Values)
|
|
if err == nil {
|
|
return buf.Bytes(), nil
|
|
}
|
|
return nil, err
|
|
}
|
|
|
|
// Deserialize back to map[interface{}]interface{}
|
|
func (s GobSerializer) Deserialize(d []byte, ss *sessions.Session) error {
|
|
dec := gob.NewDecoder(bytes.NewBuffer(d))
|
|
return dec.Decode(&ss.Values)
|
|
}
|