Method makeSessionWithTTL

rest/session_api.go:143–157

Creates a session with TTL and adds to the response. Does NOT return the session info response.

(user auth.User, expiry time.Duration, oneTime bool)

// Creates a session with TTL and adds to the response.  Does NOT return the session info response.
func (h *handler) makeSessionWithTTL(user auth.User, expiry time.Duration, oneTime bool) (sessionID string, err error) {
	if user == nil {
		return "", ErrInvalidLogin
	}
	h.user = user
	auth := h.db.Authenticator(h.ctx())
	session, err := auth.CreateSession(h.ctx(), h.user, expiry, oneTime)
	if err != nil {
		return "", err
	}
	cookie := auth.MakeSessionCookie(session, h.db.Options.SecureCookieOverride, h.db.Options.SessionCookieHttpOnly, h.db.SameSiteCookieMode)
	base.AddDbPathToCookie(h.rq, cookie)
	http.SetCookie(h.response, cookie)
	return session.ID, nil
}

// MakeSessionFromUserAndEmail first attempts to find the user by username.  If found, updates the users's
// email if different. If no match for username, attempts to find by the user by email.