jacob1123/budgeteer
1
1
Fork 0
Code Issues 12 Pull Requests 1 Packages Releases 1 Wiki Activity

Make Cookie non-secure while in dev

Browse Source
This commit is contained in:
Jan Bader 2016-11-23 22:29:13 +01:00
parent b5c81aa956
commit 038976ca4d
1 changed files with 25 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
main.go
View File

@ -64,7 +64,11 @@ func loginPost(c *gin.Context) {
username, _ := c.GetPostForm("username")
password, _ := c.GetPostForm("password")
if username == "jan" && password == "passwort" {
if username != "jan" || password != "passwort" {
c.AbortWithStatus(http.StatusUnauthorized)
return
}
// Create token
token := jwt.New(jwt.SigningMethodHS256)
@ -79,12 +83,12 @@ func loginPost(c *gin.Context) {
c.AbortWithStatus(http.StatusUnauthorized)
}
c.SetCookie("authentication", t, (int)((expiration * time.Hour).Seconds()), "/", "localhost:8080", true, true)
maxAge := (int)((expiration * time.Hour).Seconds())
c.SetCookie("authentication", t, maxAge, "", "", false, true)
c.JSON(http.StatusOK, map[string]string{
"token": t,
})
}
return
c.AbortWithStatus(http.StatusUnauthorized)
}