Method CreateUserSession

pkg/account/user.go:184–216

(w http.ResponseWriter, r *http.Request, userIDs *ttnpb.UserIdentifiers)

}

func (s *server) CreateUserSession(w http.ResponseWriter, r *http.Request, userIDs *ttnpb.UserIdentifiers) error {
	ctx := r.Context()
	tokenSecret, err := auth.GenerateKey(ctx)
	if err != nil {
		return err
	}
	hashedSecret, err := auth.Hash(auth.NewContextWithHashValidator(ctx, tokenHashSettings), tokenSecret)
	if err != nil {
		return err
	}
	newSession := &ttnpb.UserSession{
		UserIds:       userIDs,
		SessionSecret: hashedSecret,
	}
	if ttl := s.configFromContext(ctx).Login.SessionTTL; ttl > 0 {
		newSession.ExpiresAt = timestamppb.New(time.Now().Add(ttl))
	}
	var session *ttnpb.UserSession
	err = s.store.Transact(ctx, func(ctx context.Context, st store.Interface) error {
		session, err = st.CreateSession(ctx, newSession)
		return err
	})
	if err != nil {
		return err
	}
	events.Publish(oauth.EvtUserLogin.NewWithIdentifiersAndData(ctx, userIDs, nil))
	return s.session.UpdateAuthCookie(w, r, func(cookie *auth.CookieShape) error {
		cookie.UserID = session.GetUserIds().GetUserId()
		cookie.SessionID = session.SessionId
		cookie.SessionSecret = tokenSecret
		return nil
	})
}

func (s *server) Logout(w http.ResponseWriter, r *http.Request) {
	r, session, err := s.session.Get(w, r)