Victor_Jay
97adf54d6d
## CI 修复 (P0/P1) P0 — 编译阻塞: - interfaces.go: postUseCase ISP 接口移除不用的 Create/Update/Delete P1 — 必须修复: - ST1000: 为 13 个包添加包注释 (common/config/model/service/...) - ST1005: redis_store.go 全部错误消息改为小写开头 - errcheck (19处): defer Close()→闭包忽略, notifier.Create→_=, r.Run→检查error - errorlint (9处): switch-on-error→errors.Is 链, ==→errors.Is - ST1020/ST1022: 导出符号注释以符号名开头 P2 — 安全评审: - gosec (12处): G203/G301/G304/G306 添加 nolint 注释并附理由 P3 — 清理: - unused: 移除 hasUnicode/energyStore/current/energyAdminUseCase - gofumpt + goimports 全量格式化 (35+ 文件)
40 lines
1.3 KiB
Go
40 lines
1.3 KiB
Go
package common
|
||
|
||
import (
|
||
"log"
|
||
"net/http"
|
||
|
||
"metazone.cc/mce/internal/config"
|
||
|
||
"github.com/gin-gonic/gin"
|
||
)
|
||
|
||
// Cookie 名称常量
|
||
const (
|
||
SessionCookieName = "mlb_sid" // 会话 ID Cookie（HttpOnly）
|
||
)
|
||
|
||
// SetSessionCookie 写入会话 ID Cookie
|
||
// rememberMe=true → Cookie maxAge=30天，关浏览器后仍保持登录
|
||
// rememberMe=false → Cookie maxAge=空闲超时（默认2h），与Redis TTL一致，关浏览器后自动清除
|
||
func SetSessionCookie(c *gin.Context, sid string, rememberMe bool, cfg *config.Config, siteSettings *config.SiteSettings) {
|
||
secure := siteSettings.CookieSecure()
|
||
c.SetSameSite(http.SameSiteLaxMode)
|
||
|
||
var maxAge int
|
||
if rememberMe {
|
||
maxAge = cfg.Session.RememberTimeout * 60 // 分钟 → 秒
|
||
} else {
|
||
maxAge = cfg.Session.IdleTimeout * 60 // 分钟 → 秒，与 Redis TTL 一致
|
||
}
|
||
|
||
log.Printf("[SetSessionCookie] sid=%s rememberMe=%v maxAge=%ds secure=%v", sid[:16]+"...", rememberMe, maxAge, secure)
|
||
c.SetCookie(SessionCookieName, sid, maxAge, "/", "", secure, true)
|
||
}
|
||
|
||
// ClearSessionCookie 清除会话 ID Cookie（logout 调用）
|
||
func ClearSessionCookie(c *gin.Context, cfg *config.Config, siteSettings *config.SiteSettings) {
|
||
secure := siteSettings.CookieSecure()
|
||
c.SetCookie(SessionCookieName, "", -1, "/", "", secure, true)
|
||
}
|