goffee/cup
1
0
Fork 2
Code Issues Pull requests Projects Releases 17 Packages Wiki Activity Actions

- Refactory cookie and API session handle. Insolated y routes and controllers (api-auth.go, app-auth.go).

Browse source 
- Cookie lifetime with sliding expiration
- Fix bug single global expiresAt in JWT, now each token has unique ExpiresAt
This commit is contained in:
Zeni Kim 2026-09-12 21:26:01 -05:00
parent bf8e2e90ec
commit 10ded026df
10 changed files with 358 additions and 304 deletions
Download patch file Download diff file Expand all files Collapse all files

25
routes.go
View file

@ -22,11 +22,14 @@ func registerRoutes() {
controller.Get("/", controllers.WelcomeHome)
// Uncomment the lines below to enable authentication API
controller.Post("/signup", controllers.Signup)
controller.Post("/signin", controllers.Signin)
controller.Post("/signout", controllers.Signout)
controller.Post("/reset-password", controllers.ResetPasswordRequest)
controller.Post("/reset-password/code/:code", controllers.SetNewPassword)
controller.Post("/api/signin", controllers.APISignin)
controller.Post("/api/signout", controllers.APISignout)
// API actions
controller.Post("/api/signup", controllers.APISignup)
controller.Post("/api/request-password", controllers.APIRequestPasswordRequest)
controller.Post("/api/reset-password/code/:code", controllers.APISetNewPassword)
// API protected route
controller.Get("/api/ping", controllers.APIPing, hooks.APIAuthCheck)
// queue sample route
controller.Get("/queuesample", controllers.Queuesample)
@ -45,8 +48,12 @@ func registerRoutes() {
controller.Post("/admin/users/delete", controllers.AdminUsersDelete)
controller.Post("/admin/users/deleteconfirm", controllers.AdminUsersDelConfirm)
controller.Get("/dashboard", controllers.WelcomeToDashboard, hooks.AuthCheck)
controller.Get("/signout", controllers.Signout)
controller.Get("/applogin", controllers.AppLogin, hooks.CheckSessionCookie)
controller.Post("/applogin", controllers.AppLogin, hooks.CheckSessionCookie)
controller.Get("/appsignout", controllers.AppSignout, hooks.CheckSessionCookie)
controller.Get("/applogin", controllers.AppLogin)
controller.Post("/applogin", controllers.AppLogin)
controller.Post("/appsignin", controllers.AppSignin)
// Cookie protected route
controller.Get("/dashboard", controllers.WelcomeToDashboard, hooks.CheckSessionCookie)
controller.Post("/dashboard", controllers.WelcomeToDashboard, hooks.CheckSessionCookie)
}