Echo session middleware

[tobigiwa]

Echo is a framework, so it does somethings for me, that's agreed. What does the custom session middleware do? that is my question.

userProfile := e.Group("/beltech")
	userProfile.Use(session.Middleware(sessions.NewCookieStore([]byte(cfg.SessionSecret))))
	userProfile.GET("/dashboard", a.homePageHandler)

after that line, what else am I suppose to do? what exaclty are the logic wrap before my handlers in terms of sessions? or I would be the one to write these logic myself?

I'm so unclear about this and the docs does'nt say much and looking into the code

// MiddlewareWithConfig returns a Sessions middleware with config.
// See `Middleware()`.
func MiddlewareWithConfig(config Config) echo.MiddlewareFunc {
	// Defaults
	if config.Skipper == nil {
		config.Skipper = DefaultConfig.Skipper
	}
	if config.Store == nil {
		panic("echo: session middleware requires store")
	}

	return func(next echo.HandlerFunc) echo.HandlerFunc {
		return func(c echo.Context) error {
			if config.Skipper(c) {
				return next(c)
			}
			defer context.Clear(c.Request())
			c.Set(key, config.Store)
			return next(c)
		}
	}
}

that is all, that does'nt also tell me much. I checked the middleware package too, nothing on session. would I be writting this logic myself then?

[aldas]

Have you checked the example it has example of 3 curl requests that showcase of that middleware work with handlers - how handlers can put values to session and read it from there.

[tobigiwa]

I did see that, buh I was looking for the real authorization stuff, the one where It checks whether the session has expired and redirect to a login

Or would I be writing that myself?

Also, where exactly is the code for this middleware? I can't find it in the middleware package.

Thanks for the time, very much appreciate it.

[tobigiwa]

@aldas

[aldas]

sessions are not always tied to auth. you can use sessions as storage for auth. session middleware does not do auth, you need to use additional middlewares for auth checks - which could use sessions as storage.

Probably something like that https://www.reddit.com/r/golang/comments/1ah28o1/golang_echo_login_and_session_template/