1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283848586 |
- // Copyright 2023 The Gitea Authors. All rights reserved.
- // SPDX-License-Identifier: MIT
-
- package context
-
- import (
- "encoding/hex"
- "net/http"
- "strings"
-
- "code.gitea.io/gitea/modules/setting"
- "code.gitea.io/gitea/modules/util"
- "code.gitea.io/gitea/modules/web/middleware"
-
- "github.com/minio/sha256-simd"
- "golang.org/x/crypto/pbkdf2"
- )
-
- const CookieNameFlash = "gitea_flash"
-
- func removeSessionCookieHeader(w http.ResponseWriter) {
- cookies := w.Header()["Set-Cookie"]
- w.Header().Del("Set-Cookie")
- for _, cookie := range cookies {
- if strings.HasPrefix(cookie, setting.SessionConfig.CookieName+"=") {
- continue
- }
- w.Header().Add("Set-Cookie", cookie)
- }
- }
-
- // SetSiteCookie convenience function to set most cookies consistently
- // CSRF and a few others are the exception here
- func (ctx *Context) SetSiteCookie(name, value string, maxAge int) {
- middleware.SetSiteCookie(ctx.Resp, name, value, maxAge)
- }
-
- // DeleteSiteCookie convenience function to delete most cookies consistently
- // CSRF and a few others are the exception here
- func (ctx *Context) DeleteSiteCookie(name string) {
- middleware.SetSiteCookie(ctx.Resp, name, "", -1)
- }
-
- // GetSiteCookie returns given cookie value from request header.
- func (ctx *Context) GetSiteCookie(name string) string {
- return middleware.GetSiteCookie(ctx.Req, name)
- }
-
- // GetSuperSecureCookie returns given cookie value from request header with secret string.
- func (ctx *Context) GetSuperSecureCookie(secret, name string) (string, bool) {
- val := ctx.GetSiteCookie(name)
- return ctx.CookieDecrypt(secret, val)
- }
-
- // CookieDecrypt returns given value from with secret string.
- func (ctx *Context) CookieDecrypt(secret, val string) (string, bool) {
- if val == "" {
- return "", false
- }
-
- text, err := hex.DecodeString(val)
- if err != nil {
- return "", false
- }
-
- key := pbkdf2.Key([]byte(secret), []byte(secret), 1000, 16, sha256.New)
- text, err = util.AESGCMDecrypt(key, text)
- return string(text), err == nil
- }
-
- // SetSuperSecureCookie sets given cookie value to response header with secret string.
- func (ctx *Context) SetSuperSecureCookie(secret, name, value string, maxAge int) {
- text := ctx.CookieEncrypt(secret, value)
- ctx.SetSiteCookie(name, text, maxAge)
- }
-
- // CookieEncrypt encrypts a given value using the provided secret
- func (ctx *Context) CookieEncrypt(secret, value string) string {
- key := pbkdf2.Key([]byte(secret), []byte(secret), 1000, 16, sha256.New)
- text, err := util.AESGCMEncrypt(key, []byte(value))
- if err != nil {
- panic("error encrypting cookie: " + err.Error())
- }
-
- return hex.EncodeToString(text)
- }
|