Skip to content

JWT cookie fetcher converted to session storage.#3946

Merged
bigkevmcd merged 3 commits intomainfrom
session-storage
Aug 30, 2023
Merged

JWT cookie fetcher converted to session storage.#3946
bigkevmcd merged 3 commits intomainfrom
session-storage

Conversation

@bigkevmcd
Copy link
Copy Markdown
Contributor

Closes

What changed?
Add initial session storage

This pulls in the scs package for storing sessions.

This means that cookies are stored in-memory for now, with a short cookie being sent to the user's browser, we access the old ID and Refresh cookies from the session.

NOTE: This is an initial release of this code, we will provide support for configuring external storage.

Why was this change made?
Support longer cookies

How was this change implemented?

How did you validate the change?
Tests and running the code

Release notes
Switching to session storage for cookies.

Documentation Changes

@bigkevmcd bigkevmcd force-pushed the session-storage branch 4 times, most recently from 101f124 to d9250a0 Compare August 24, 2023 08:39
Comment thread pkg/server/auth/server.go Outdated
Comment thread pkg/server/auth/auth_test.go

sessionManager := scs.New()
// TODO: Make this configurable
sessionManager.Lifetime = 24 * time.Hour
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Could make this a flag, but 24h is pretty good for now too.

Copy link
Copy Markdown
Contributor

@foot foot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested w/ OIDC / no-auth / user-account all seems to be working great

Add initial session storage

This pulls in the scs package for storing sessions.

This means that cookies are stored in-memory for now, with a short
cookie being sent to the user's browser, we access the old ID and
Refresh cookies from the session.
@bigkevmcd bigkevmcd merged commit 20749c9 into main Aug 30, 2023
@bigkevmcd bigkevmcd deleted the session-storage branch August 30, 2023 09:27
This was referenced Aug 30, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants