1d07830954
- ResolveSession: reads cookie, SHA-256 lookup, MaybeExtend best-effort, attaches Session+User to ctx - RequireAuth: 303 /login for plain requests; HX-Redirect: /login for HTMX (D-23, Pattern 5) - RedirectIfAuthed: bounces authed users to / from login/signup pages - Authed(ctx): typed context accessor for session + user - redirect helper centralizes 303 vs HX-Redirect logic (Pitfall 9: no 302) - 9 tests: 3 real-DB (ResolveSession) + 6 pure ctx/routing (RequireAuth, RedirectIfAuthed) |
||
|---|---|---|
| .. | ||
| cookie.go | ||
| doc.go | ||
| middleware.go | ||
| middleware_test.go | ||
| password.go | ||
| password_test.go | ||
| session.go | ||
| session_test.go | ||
| testdb_test.go | ||
| types.go | ||