GolangCookieSession管理详解

func setCookie(w http.ResponseWriter, r *http.Request) {
    cookie := &http.Cookie{
        Name:     "username",
        Value:    "gopher",
        Path:     "/",
        HttpOnly: true,
        MaxAge:   3600, // 1小时
    }
    http.SetCookie(w, cookie)
    fmt.Fprintf(w, "Cookie已设置")
}

func getCookie(w http.ResponseWriter, r *http.Request) {
    if cookie, err := r.Cookie("username"); err == nil {
        fmt.Fprintf(w, "用户名: %s", cookie.Value)
    } else {
        fmt.Fprintf(w, "未找到Cookie")
    }
}

type SessionManager struct {
    sessions map[string]map[string]interface{}
    mu       sync.RWMutex
}

func NewSessionManager() *SessionManager {
    return &SessionManager{
        sessions: make(map[string]map[string]interface{}),
    }
}

func (sm *SessionManager) GenerateSessionID() string {
    b := make([]byte, 16)
    rand.Read(b)
    return fmt.Sprintf("%x", b)
}

func (sm *SessionManager) CreateSession(w http.ResponseWriter, userID string) string {
    sm.mu.Lock()
    defer sm.mu.Unlock()

    sessionID := sm.GenerateSessionID()
    sm.sessions[sessionID] = map[string]interface{}{
        "userID":   userID,
        "created":  time.Now(),
    }

    cookie := &http.Cookie{
        Name:    "session_id",
        Value:   sessionID,
        Path:    "/",
        HttpOnly: true,
        MaxAge:  3600,
    }
    http.SetCookie(w, cookie)
    return sessionID
}

func (sm *SessionManager) GetSession(r *http.Request) map[string]interface{} {
    cookie, err := r.Cookie("session_id")
    if err != nil {
        return nil
    }

    sm.mu.RLock()
    defer sm.mu.RUnlock()

    session, exists := sm.sessions[cookie.Value]
    if !exists {
        return nil
    }
    return session
}

go get github.com/alexedwards/scs/v2

sessionManager := session.New()
// 使用中间件自动管理Session
handler := sessionManager.LoadAndSave(myHandler)

func myHandler(w http.ResponseWriter, r *http.Request) {
    // 存储数据
    sessionManager.Put(r.Context(), "userID", 123)
    
    // 读取数据
    userID := sessionManager.GetInt(r.Context(), "userID", 0)
    fmt.Fprintf(w, "用户ID: %d", userID)
}