Session improvements (#510)

util/cache.go

@@ -5,3 +5,4 @@ import "sync"
 var IPToSubnetRange = map[string]uint16{}
 var TgUseridToClientID = map[int64][]string{}
 var TgUseridToClientIDMutex sync.RWMutex
+var DBUsersToCRC32 = map[string]uint32{}

util/config.go

@@ -9,24 +9,25 @@ import (
 
 // Runtime config
 var (
-	DisableLogin      bool
-	BindAddress       string
-	SmtpHostname      string
-	SmtpPort          int
-	SmtpUsername      string
-	SmtpPassword      string
-	SmtpNoTLSCheck    bool
-	SmtpEncryption    string
-	SmtpAuthType      string
-	SmtpHelo          string
-	SendgridApiKey    string
-	EmailFrom         string
-	EmailFromName     string
-	SessionSecret     []byte
-	WgConfTemplate    string
-	BasePath          string
-	SubnetRanges      map[string]([]*net.IPNet)
-	SubnetRangesOrder []string
+	DisableLogin       bool
+	BindAddress        string
+	SmtpHostname       string
+	SmtpPort           int
+	SmtpUsername       string
+	SmtpPassword       string
+	SmtpNoTLSCheck     bool
+	SmtpEncryption     string
+	SmtpAuthType       string
+	SmtpHelo           string
+	SendgridApiKey     string
+	EmailFrom          string
+	EmailFromName      string
+	SessionSecret      [64]byte
+	SessionMaxDuration int64
+	WgConfTemplate     string
+	BasePath           string
+	SubnetRanges       map[string]([]*net.IPNet)
+	SubnetRangesOrder  []string
 )
 
 const (

util/util.go

@@ -2,9 +2,12 @@ package util
 
 import (
 	"bufio"
+	"bytes"
+	"encoding/gob"
 	"encoding/json"
 	"errors"
 	"fmt"
+	"hash/crc32"
 	"io"
 	"io/fs"
 	"math/rand"
@@ -827,3 +830,38 @@ func filterStringSlice(s []string, excludedStr string) []string {
 	}
 	return filtered
 }
+
+func GetDBUserCRC32(dbuser model.User) uint32 {
+	buf := new(bytes.Buffer)
+	enc := gob.NewEncoder(buf)
+	if err := enc.Encode(dbuser); err != nil {
+		panic("model.User is gob-incompatible, session verification is impossible")
+	}
+	return crc32.ChecksumIEEE(buf.Bytes())
+}
+
+func ConcatMultipleSlices(slices ...[]byte) []byte {
+	var totalLen int
+
+	for _, s := range slices {
+		totalLen += len(s)
+	}
+
+	result := make([]byte, totalLen)
+
+	var i int
+
+	for _, s := range slices {
+		i += copy(result[i:], s)
+	}
+
+	return result
+}
+
+func GetCookiePath() string {
+	cookiePath := BasePath
+	if cookiePath == "" {
+		cookiePath = "/"
+	}
+	return cookiePath
+}