Method New

pkg/auth/cookie/sessionstore.go:169–206

(r *http.Request, name string)

}

func (store *UserSessionStore) New(r *http.Request, name string) (*sessions.Session, error) {
	session := sessions.NewSession(store, name)

	if session == nil {
		return nil, fmt.Errorf("could not create new session")
	}

	opts := *store.options
	session.Options = &(opts)
	session.IsNew = true

	var err error
	if c, errCookie := r.Cookie(name); errCookie == nil {
		err = securecookie.DecodeMulti(name, c.Value, &session.ID, store.codecs...)
		if err == nil {
			err = store.load(r.Context(), session)

			if err != nil {
				if errors.Is(err, pgx.ErrNoRows) {
					err = nil
				} else if strings.Contains(err.Error(), "expired timestamp") {
					err = nil
					session.IsNew = false
				}
			} else {
				session.IsNew = false
			}
		} else if strings.Contains(err.Error(), "the value is not valid") {
			// this error occurs if the encryption keys have been rotated, in which case we'd like a new cookie
			err = nil
			session.IsNew = true
		}
	}

	store.MaxAge(store.options.MaxAge)

	return session, err
}

// Get Fetches a session for a given name after it has been added to the
// registry.