botris.social/femto-backend
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

store whole user in session actually

Browse source
This commit is contained in:
john 2025-05-20 10:06:56 +02:00
parent a30811cb84
commit 71584d91be
1 changed files with 14 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

27
Femto.Api/Sessions/HttpContextSessionExtensions.cs
View file

@ -1,3 +1,5 @@
using System.Text.Json;
using System.Text.Json.Serialization;
using Femto.Api.Auth; using Femto.Api.Auth;
using Femto.Modules.Auth.Application.Dto; using Femto.Modules.Auth.Application.Dto;
@ -12,7 +14,6 @@ internal static class HttpContextSessionExtensions
CookieSettings cookieSettings CookieSettings cookieSettings
) )
{ {
var secure = cookieSettings.Secure; var secure = cookieSettings.Secure;
var sameSite = cookieSettings.SameSite ? SameSiteMode.Strict : SameSiteMode.Unspecified; var sameSite = cookieSettings.SameSite ? SameSiteMode.Strict : SameSiteMode.Unspecified;
var expires = session.Expires; var expires = session.Expires;
@ -30,19 +31,15 @@ internal static class HttpContextSessionExtensions
); );
httpContext.Response.Cookies.Append( httpContext.Response.Cookies.Append(
"uid", "user",
user.Id.ToString(), JsonSerializer.Serialize(
new CookieOptions user,
{ new JsonSerializerOptions
Secure = cookieSettings.Secure, {
SameSite = cookieSettings.SameSite ? SameSiteMode.Strict : SameSiteMode.Unspecified, PropertyNamingPolicy = JsonNamingPolicy.CamelCase,
Expires = session.Expires, Converters = { new JsonStringEnumConverter() },
} }
); ),
httpContext.Response.Cookies.Append(
"uname",
user.Username,
new CookieOptions new CookieOptions
{ {
Secure = cookieSettings.Secure, Secure = cookieSettings.Secure,
@ -55,6 +52,6 @@ internal static class HttpContextSessionExtensions
public static void DeleteSession(this HttpContext httpContext) public static void DeleteSession(this HttpContext httpContext)
{ {
httpContext.Response.Cookies.Delete("session"); httpContext.Response.Cookies.Delete("session");
httpContext.Response.Cookies.Delete("hasSession"); httpContext.Response.Cookies.Delete("user");
} }
} }