x/web-app-template
Archived
Template
2
0
Fork 0
Code Issues 13 Pull Requests 4 Actions Packages Activity

fix(auth): #130 delete inactive sessions on login

Browse Source
This commit is contained in:
Tim Wundenberg
2024-09-03 22:49:45 +02:00
parent 0cb15a49d4
commit ce554cfb73
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
service/auth.go
View File

@@ -154,7 +154,6 @@ func HandleSignInComp(db *sql.DB) http.HandlerFunc {
if result { if result {
w.Header().Add("HX-Redirect", "/") w.Header().Add("HX-Redirect", "/")
w.WriteHeader(http.StatusOK)
} else { } else {
auth.Error("Invalid email or password").Render(r.Context(), w) auth.Error("Invalid email or password").Render(r.Context(), w)
} }
@@ -183,7 +182,7 @@ func HandleSignOutComp(db *sql.DB) http.HandlerFunc {
} }
http.SetCookie(w, &c) http.SetCookie(w, &c)
auth.UserComp("").Render(r.Context(), w) w.Header().Add("HX-Redirect", "/")
} }
} }
@@ -197,9 +196,15 @@ func tryCreateSessionAndSetCookie(r *http.Request, w http.ResponseWriter, db *sq
} }
session_id := base64.StdEncoding.EncodeToString(session_id_bytes) session_id := base64.StdEncoding.EncodeToString(session_id_bytes)
// Delete old inactive sessions
_, err = db.Exec("DELETE FROM session WHERE created_at < datetime('now','-8 hours') AND user_uuid = ?", user_uuid)
if err != nil {
slog.Error("Could not delete old sessions: " + err.Error())
}
_, err = db.Exec("INSERT INTO session (session_id, user_uuid, created_at) VALUES (?, ?, datetime())", session_id, user_uuid) _, err = db.Exec("INSERT INTO session (session_id, user_uuid, created_at) VALUES (?, ?, datetime())", session_id, user_uuid)
if err != nil { if err != nil {
slog.Error("Could not insert session: %v", err) slog.Error("Could not insert session: " + err.Error())
auth.Error("Internal Server Error").Render(r.Context(), w) auth.Error("Internal Server Error").Render(r.Context(), w)
return false return false
} }
@@ -242,7 +247,7 @@ func verifySessionAndReturnUser(db *sql.DB, r *http.Request) *User {
INNER JOIN user u ON s.user_uuid = u.user_uuid INNER JOIN user u ON s.user_uuid = u.user_uuid
WHERE session_id = ?`, sessionId).Scan(&user.id, &user.email, &createdAt) WHERE session_id = ?`, sessionId).Scan(&user.id, &user.email, &createdAt)
if err != nil { if err != nil {
slog.Error("Could not verify session: " + err.Error()) slog.Warn("Could not verify session: " + err.Error())
return nil return nil
} }