blob: 62fd3c7e8126c8d16808b2eb31bd4a9618d42e95 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
// SPDX-License-Identifier: Apache-2.0
// SPDX-FileCopyrightText: Copyright OpenBMC Authors
#pragma once
#include "http_response.hpp"
#include "sessions.hpp"
#include <boost/beast/http/field.hpp>
namespace bmcweb
{
inline void setSessionCookies(crow::Response& res,
const persistent_data::UserSession& session)
{
res.addHeader(boost::beast::http::field::set_cookie,
"XSRF-TOKEN=" + session.csrfToken +
"; Path=/; SameSite=Strict; Secure");
res.addHeader(boost::beast::http::field::set_cookie,
"BMCWEB-SESSION=" + session.sessionToken +
"; Path=/; SameSite=Strict; Secure; HttpOnly");
}
inline void clearSessionCookies(crow::Response& res)
{
res.addHeader(boost::beast::http::field::set_cookie,
"BMCWEB-SESSION="
"; Path=/; SameSite=Strict; Secure; HttpOnly; "
"expires=Thu, 01 Jan 1970 00:00:00 GMT");
}
} // namespace bmcweb
|
