sohamkamani / go-session-auth-example

An example of session based authentication in Go

Session Cookie Authentication in Go

Example repo for my post on session cookie authentication in Go

Running our application

To run this application, build and run the Go binary:

go build
./go-session-auth-example

Now, using any HTTP client with support for cookies (like Postman, or your web browser) make a sign-in request with the appropriate credentials:

POST http://localhost:8080/signin

{"username":"user2","password":"password2"}

You can now try hitting the welcome route from the same client to get the welcome message:

GET http://localhost:8080/welcome

Hit the refresh route, and then inspect the clients cookies to see the new value of the session_token:

POST http://localhost:8080/refresh

Finally, call the logout route to clear session data:

GET http://localhost:8080/logout

Calling the welcome and refresh routes after this will result in a 401 error.

go-session-auth-example's Issues

No LICENSE

The program doesn't seem to have a LICENSE. Does it mean that it's in the public domain?

Unhashed passwords

Why are you not using hashed passwords, but plaintext? Is there a specific reason for that?