IntenseWebs/grafana
3
0
Fork 0
mirror of https://github.com/grafana/grafana.git synced 2025-02-25 18:55:37 -06:00
Code Issues Packages Projects Releases Wiki Activity

login: regenerates session id on login

Browse Source
This commit is contained in:
Daniel Lee 2017-08-07 10:00:29 +02:00
parent f547c93a4f
commit 1e5778174c
2 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
pkg/api/login.go
View File

@ -143,6 +143,7 @@ func loginUserWithUser(user *m.User, c *middleware.Context) {
c.SetSuperSecureCookie(user.Rands+user.Password, setting.CookieRememberName, user.Login, days, setting.AppSubUrl+"/") c.SetSuperSecureCookie(user.Rands+user.Password, setting.CookieRememberName, user.Login, days, setting.AppSubUrl+"/")
} }
c.Session.RegenerateId(c)
c.Session.Set(middleware.SESS_KEY_USERID, user.Id) c.Session.Set(middleware.SESS_KEY_USERID, user.Id)
} }

8
pkg/middleware/session.go
View File

@ -103,6 +103,8 @@ type SessionStore interface {
Destory(*Context) error Destory(*Context) error
// init // init
Start(*Context) error Start(*Context) error
// RegenerateId regenerates the session id
RegenerateId(*Context) error
} }
type SessionWrapper struct { type SessionWrapper struct {
@ -116,6 +118,12 @@ func (s *SessionWrapper) Start(c *Context) error {
return err return err
} }
func (s *SessionWrapper) RegenerateId(c *Context) error {
var err error
s.session, err = s.manager.RegenerateId(c.Context)
return err
}
func (s *SessionWrapper) Set(k interface{}, v interface{}) error { func (s *SessionWrapper) Set(k interface{}, v interface{}) error {
if s.session != nil { if s.session != nil {
return s.session.Set(k, v) return s.session.Set(k, v)