Skip to content

refactor(api)!: use session cookie auth#58

Merged
sreimers merged 5 commits intomainfrom
cookie_auth
Jan 31, 2025
Merged

refactor(api)!: use session cookie auth#58
sreimers merged 5 commits intomainfrom
cookie_auth

Conversation

@sreimers
Copy link
Copy Markdown
Member

@sreimers sreimers commented Jan 26, 2025

  • Session Management

    • The "Session-ID" header is replaced with a "Set-Cookie" header.
    • A new cookie named mix_session is introduced.
  • WebSocket Handling

    • sl_ws_open function now accepts an additional struct session *sess parameter.
    • WebSocket authentication is now based on session cookies.
  • Session Lookup

    • slmix_session_lookup_hdr now retrieves session IDs from the Cookie header instead of "Session-ID".
    • Parses the mix_session cookie to establish user sessions.

This change improves security and aligns the authentication mechanism with best practices for session management.

@sreimers sreimers force-pushed the cookie_auth branch 3 times, most recently from 03a9645 to e7ebdbb Compare January 30, 2025 08:33
@sreimers sreimers changed the title misc: use session cookie auth refactor(api)!: use session cookie auth Jan 30, 2025
@sreimers sreimers marked this pull request as ready for review January 31, 2025 10:48
@sreimers sreimers merged commit d40f59c into main Jan 31, 2025
@sreimers sreimers deleted the cookie_auth branch January 31, 2025 12:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant