sessionguard

Documentation

Index

• Constants
• func EnvKey(ctx echo.Context, cfg SessionGuardConfig) string
• func GetLastLoginInfo(ctx echo.Context, ownerType string, ownerId uint64, sessionId string) (*dbschema.NgingLoginLog, error)
• func IgnoreBrowserUA(ctx echo.Context)
• func Unpack(ctx echo.Context, encrypted string, isBackend bool) (password string, err error)
• func UnsetSession(ctx echo.Context, ownerType string)
• func Validate(ctx echo.Context, lastIP string, ownerType string, ownerId uint64) bool
• type Config
  • func GetConfig() *Config
• type Environment
  • func GetEnvFromSession(ctx echo.Context, ownerType string) *Environment
  • func (e *Environment) SetSession(ctx echo.Context, ownerType string)
• type PE
  • func (p *PE) Verify(ctx echo.Context, isBackend bool) error
• type SessionGuardConfig
  • func (cfg *SessionGuardConfig) VerifyEnvKey(ctx echo.Context, envKey string, dontCheckTime bool) error

Constants

const InvalidIPAddress = `invalid ip address`

Functions

func EnvKey

func EnvKey(ctx echo.Context, cfg SessionGuardConfig) string

func GetLastLoginInfo

func GetLastLoginInfo(ctx echo.Context, ownerType string, ownerId uint64, sessionId string) (*dbschema.NgingLoginLog, error)

func IgnoreBrowserUA

func IgnoreBrowserUA(ctx echo.Context)

func Unpack

func Unpack(ctx echo.Context, encrypted string, isBackend bool) (password string, err error)

func UnsetSession

func UnsetSession(ctx echo.Context, ownerType string)

func Validate

func Validate(ctx echo.Context, lastIP string, ownerType string, ownerId uint64) bool

Validate 验证 session 环境是否安全，避免 cookie 和 session id 被窃取 在非匿名模式下 UserAgent 和 IP 归属地与登录时的一致

Types

type Config

type Config struct {
	SessionGuardConfig
	Frontend *SessionGuardConfig `json:"frontend,omitempty"`
}

func GetConfig

func GetConfig() *Config

type Environment

type Environment struct {
	UserAgent string                 `json:"ua"`
	Location  ip2regionparser.IpInfo `json:"loc"`
}

func GetEnvFromSession

func GetEnvFromSession(ctx echo.Context, ownerType string) *Environment

func (*Environment) SetSession

func (e *Environment) SetSession(ctx echo.Context, ownerType string)

type PE

type PE struct {
	Password  string `json:"p"`
	EnvKey    string `json:"e"`
	Timestamp int64  `json:"t"`
}

func (*PE) Verify

func (p *PE) Verify(ctx echo.Context, isBackend bool) error

type SessionGuardConfig

type SessionGuardConfig struct {
	Expires         int64 `json:"expires"`
	IgnoreBrowserUA bool  `json:"ignoreBrowserUA"`
	IgnoreBrowserIP bool  `json:"ignoreBrowserIP"`
}

func (*SessionGuardConfig) VerifyEnvKey

func (cfg *SessionGuardConfig) VerifyEnvKey(ctx echo.Context, envKey string, dontCheckTime bool) error