vndangkhoa/neko
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

read cookies only if enabled.

Browse source
This commit is contained in:
Miroslav Šedivý 2021-04-24 21:11:07 +02:00
parent 04d2fa8863
commit 4f1e3c879a
1 changed files with 8 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
internal/session/auth.go
View file

@ -55,6 +55,14 @@ func (manager *SessionManagerCtx) Authenticate(r *http.Request) (types.Session,
} }
func (manager *SessionManagerCtx) getToken(r *http.Request) (string, bool) { func (manager *SessionManagerCtx) getToken(r *http.Request) (string, bool) {
if manager.CookieEnabled() {
// get from Cookie
cookie, err := r.Cookie(manager.config.CookieName)
if err == nil {
return cookie.Value, true
}
}
// get from Header // get from Header
reqToken := r.Header.Get("Authorization") reqToken := r.Header.Get("Authorization")
splitToken := strings.Split(reqToken, "Bearer ") splitToken := strings.Split(reqToken, "Bearer ")
@ -62,12 +70,6 @@ func (manager *SessionManagerCtx) getToken(r *http.Request) (string, bool) {
return strings.TrimSpace(splitToken[1]), true return strings.TrimSpace(splitToken[1]), true
} }
// get from Cookie
cookie, err := r.Cookie(manager.config.CookieName)
if err == nil {
return cookie.Value, true
}
// get from URL // get from URL
token := r.URL.Query().Get("token") token := r.URL.Query().Get("token")
if token != "" { if token != "" {