Golang实现用户会话管理全攻略

var sessions = make(map[string]map[string]interface{})
var mutex = &sync.RWMutex{}

func setSession(w http.ResponseWriter, r *http.Request, userID string) {
    sessionID := generateSessionID() // 可用uuid或crypto随机生成
    mutex.Lock()
    sessions[sessionID] = map[string]interface{}{"userID": userID, "loginTime": time.Now()}
    mutex.Unlock()

    http.SetCookie(w, &http.Cookie{
        Name:  "session_id",
        Value: sessionID,
        Path:  "/",
        MaxAge: 3600, // 1小时过期
    })
}

func getSession(r *http.Request) (map[string]interface{}, bool) {
    cookie, err := r.Cookie("session_id")
    if err != nil {
        return nil, false
    }
    mutex.RLock()
    session, exists := sessions[cookie.Value]
    mutex.RUnlock()
    return session, exists
}

func requireAuth(next http.HandlerFunc) http.HandlerFunc {
    return func(w http.ResponseWriter, r *http.Request) {
        session, valid := getSession(r)
        if !valid {
            http.Redirect(w, r, "/login", http.StatusFound)
            return
        }
        // 可将session信息注入上下文
        ctx := context.WithValue(r.Context(), "user", session["userID"])
        next.ServeHTTP(w, r.WithContext(ctx))
    }
}

// 使用
http.HandleFunc("/dashboard", requireAuth(dashboardHandler))

store := sessions.NewCookieStore([]byte("your-secret-key"))
store.Options.HttpOnly = true

func handler(w http.ResponseWriter, r *http.Request) {
    session, _ := store.Get(r, "session-name")
    session.Values["user_id"] = 123
    session.Save(r, w)
}