Method GetSessionCookie

internal/service/auth_service.go:405–452

(c *gin.Context)

}

func (auth *AuthService) GetSessionCookie(c *gin.Context) (repository.Session, error) {
	cookie, err := c.Cookie(auth.config.SessionCookieName)

	if err != nil {
		return repository.Session{}, err
	}

	session, err := auth.queries.GetSession(c, cookie)

	if err != nil {
		if errors.Is(err, sql.ErrNoRows) {
			return repository.Session{}, fmt.Errorf("session not found")
		}
		return repository.Session{}, err
	}

	currentTime := time.Now().Unix()

	if auth.config.SessionMaxLifetime != 0 && session.CreatedAt != 0 {
		if currentTime-session.CreatedAt > int64(auth.config.SessionMaxLifetime) {
			err = auth.queries.DeleteSession(c, cookie)
			if err != nil {
				tlog.App.Error().Err(err).Msg("Failed to delete session exceeding max lifetime")
			}
			return repository.Session{}, fmt.Errorf("session expired due to max lifetime exceeded")
		}
	}

	if currentTime > session.Expiry {
		err = auth.queries.DeleteSession(c, cookie)
		if err != nil {
			tlog.App.Error().Err(err).Msg("Failed to delete expired session")
		}
		return repository.Session{}, fmt.Errorf("session expired")
	}

	return repository.Session{
		UUID:        session.UUID,
		Username:    session.Username,
		Email:       session.Email,
		Name:        session.Name,
		Provider:    session.Provider,
		TotpPending: session.TotpPending,
		OAuthGroups: session.OAuthGroups,
		OAuthName:   session.OAuthName,
		OAuthSub:    session.OAuthSub,
	}, nil
}

func (auth *AuthService) LocalAuthConfigured() bool {
	return len(auth.config.Users) > 0