在 Go 專案使用 Session 認證

Memo's Blog

2021-05-29

Others

Go, Programming

做法

建立專案。

1 2	mkdir go-session-example cd go-session-example

初始化 Go Modules。

1	go mod init github.com/memochou1993/go-session-example

下載 gorilla/sessions 套件。

1	go get github.com/gorilla/sessions

下載 joho/godotenv 套件。

1	go get github.com/joho/godotenv

新增一個 main.go 檔：

var (
	key        = []byte(os.Getenv("SESSION_KEY"))
	store      = sessions.NewCookieStore(key)
	cookieName = "auth"
)

func main() {
	http.HandleFunc("/secret", secret)
	http.HandleFunc("/login", login)
	http.HandleFunc("/logout", logout)

	http.ListenAndServe(":8080", nil)
}

func secret(w http.ResponseWriter, r *http.Request) {
	session, _ := store.Get(r, cookieName)

	if auth, ok := session.Values["authenticated"].(bool); !ok || !auth {
		http.Error(w, "Forbidden", http.StatusForbidden)
		return
	}

	fmt.Fprintln(w, "Secret")
}

func login(w http.ResponseWriter, r *http.Request) {
	session, _ := store.Get(r, cookieName)

	session.Values["authenticated"] = true
	session.Save(r, w)
}

func logout(w http.ResponseWriter, r *http.Request) {
	session, _ := store.Get(r, cookieName)

	session.Values["authenticated"] = false
	session.Save(r, w)
}