Function BuildAdminCookie

internal/cookie/admin_cookie.go:24–36

BuildAdminCookie returns the admin session cookie to set on the response. Transport-agnostic so non-gin callers (the service layer, gRPC handlers) can produce it as a side-effect. Mirrors SetAdminCookie: host-scoped, HttpOnly, SameSite=Strict, 1-hour lifetime.

(hostname, token string, adminCookieSecure bool)

// produce it as a side-effect. Mirrors SetAdminCookie: host-scoped, HttpOnly,
// SameSite=Strict, 1-hour lifetime.
func BuildAdminCookie(hostname, token string, adminCookieSecure bool) *http.Cookie {
	host, _ := parsers.GetHostParts(hostname)
	return &http.Cookie{
		Name:     constants.AdminCookieName,
		Value:    token,
		MaxAge:   3600,
		Path:     "/",
		Domain:   host,
		Secure:   adminCookieSecure,
		HttpOnly: true,
		SameSite: http.SameSiteStrictMode,
	}
}

// GetAdminCookie gets the admin cookie from the request
func GetAdminCookie(gc *gin.Context) (string, error) {