header

Documentation

Overview

Package header provides a request header based implementation of a session loader.

Index

• func TokenFromHeaders(r *http.Request) string
• type Store
  • func NewStore(enc encoding.Unmarshaler) *Store
  • func (as *Store) LoadSession(r *http.Request) (string, error)

Functions

func TokenFromHeaders

func TokenFromHeaders(r *http.Request) string

TokenFromHeaders retrieves the value of the authorization header(s) from a given request and authentication type.

Types

type Store

type Store struct {
	// contains filtered or unexported fields
}

Store implements the load session store interface using http authorization headers.

func NewStore

func NewStore(enc encoding.Unmarshaler) *Store

NewStore returns a new header store for loading sessions from authorization header as defined in as defined in rfc2617

NOTA BENE: While most servers do not log Authorization headers by default, you should ensure no other services are logging or leaking your auth headers.

func (*Store) LoadSession

func (as *Store) LoadSession(r *http.Request) (string, error)

LoadSession tries to retrieve the token string from the Authorization header.