Method createUserSession

rest/session_api.go:208–250

ADMIN API: Generates a login session for a user and returns the session ID and cookie name.

()

// ADMIN API: Generates a login session for a user and returns the session ID and cookie name.
func (h *handler) createUserSession() error {
	h.assertAdminOnly()
	var params struct {
		Name string `json:"name"`
		TTL  int    `json:"ttl"`
	}
	params.TTL = int(defaultSessionTTL / time.Second)
	err := h.readJSONInto(&params)
	if err != nil {
		return err
	} else if params.Name == "" || params.Name == base.GuestUsername || !auth.IsValidPrincipalName(params.Name) {
		return base.HTTPErrorf(http.StatusBadRequest, "Invalid or missing user name")
	}
	authenticator := h.db.Authenticator(h.ctx())
	user, err := authenticator.GetUser(params.Name)
	if user == nil {
		if err == nil {
			err = base.HTTPErrorf(http.StatusNotFound, "No such user %q", params.Name)
		}
		return err
	}

	ttl := time.Duration(params.TTL) * time.Second
	if ttl < 1.0 {
		return base.HTTPErrorf(http.StatusBadRequest, "Invalid or missing ttl")
	}

	oneTime := false
	session, err := authenticator.CreateSession(h.ctx(), user, ttl, oneTime)
	if err != nil {
		return err
	}
	var response struct {
		SessionID  string `json:"session_id"`
		Expires    string `json:"expires"`
		CookieName string `json:"cookie_name"`
	}
	response.SessionID = session.ID
	response.Expires = session.Expiration.UTC().Format(time.RFC3339)
	response.CookieName = authenticator.SessionCookieName
	h.writeJSON(response)
	return nil
}

func (h *handler) getUserSession() error {