Method makeStateCookie

rest/oidc_api.go:334–349

makeStateCookie creates a new state cookie with the specified value and Max-Age. Max-Age has precedence whilst determining the state cookie expiration even though both Expires and Max-Age are set.

(value string, maxAge int)

// Max-Age has precedence whilst determining the state cookie expiration even though
// both Expires and Max-Age are set.
func (h *handler) makeStateCookie(value string, maxAge int) *http.Cookie {
	cookie := &http.Cookie{
		Name:     stateCookieName,
		Value:    value,
		HttpOnly: true,
		MaxAge:   maxAge,
	}
	if h.rq.TLS != nil {
		cookie.Secure = true
	}
	if maxAge > 0 {
		cookie.Expires = time.Now().Add(time.Duration(maxAge) * time.Second)
	}
	base.AddDbPathToCookie(h.rq, cookie)
	return cookie
}