add session expiration days to config

Author: isoppp

internal/config/config.go

@@ -13,14 +13,15 @@ var (
 )
 
 type Config struct {
-	Port       string // flag and env
-	IsDev      bool   // flag
-	DBHost     string // env
-	DBPort     string // env
-	DBName     string // env
-	DBUser     string // env
-	DBPassword string // env
-	SecretKey  string // env
+	Port                  string // flag and env
+	IsDev                 bool   // flag
+	DBHost                string // env
+	DBPort                string // env
+	DBName                string // env
+	DBUser                string // env
+	DBPassword            string // env
+	SecretKey             string // env
+	SessionExpirationDays string // env
 }
 
 func (c *Config) GetDataSourceName() string {
@@ -40,14 +41,15 @@ func NewConfig() *Config {
 		flag.BoolVar(&isDev, "dev", false, "enable development mode")
 		flag.Parse()
 		appConfig = &Config{
-			Port:       getEnv("PORT", "8081"),
-			IsDev:      isDev,
-			DBHost:     getEnv("MY_DB_HOST", "localhost"),
-			DBPort:     getEnv("MY_DB_PORT", "5433"),
-			DBName:     getEnv("MY_DB_NAME", "sandbox"),
-			DBUser:     getEnv("MY_DB_USER", "postgres"),
-			DBPassword: getEnv("MY_DB_PASSWORD", "postgres"),
-			SecretKey:  getEnv("MY_SECRET_KEY", "12345678901234567890123456789012"),
+			Port:                  getEnv("PORT", "8081"),
+			IsDev:                 isDev,
+			DBHost:                getEnv("MY_DB_HOST", "localhost"),
+			DBPort:                getEnv("MY_DB_PORT", "5433"),
+			DBName:                getEnv("MY_DB_NAME", "sandbox"),
+			DBUser:                getEnv("MY_DB_USER", "postgres"),
+			DBPassword:            getEnv("MY_DB_PASSWORD", "postgres"),
+			SecretKey:             getEnv("MY_SECRET_KEY", "12345678901234567890123456789012"),
+			SessionExpirationDays: getEnv("MY_SESSION_EXPIRATION_DAYS", "90"),
 		}
 
 		if isDev {

internal/handlers/session.go

@@ -4,6 +4,7 @@ import (
 	"net/http"
 	"sandbox-go-api-sqlboiler-rest-auth/internal/middleware"
 	"sandbox-go-api-sqlboiler-rest-auth/models"
+	"strconv"
 	"time"
 
 	"github.com/google/uuid"
@@ -40,11 +41,13 @@ func CreateSession(c echo.Context) error {
 		return echo.NewHTTPError(http.StatusBadRequest)
 	}
 
+	expirationDays := strconv.Atoi(cc.Config.SessionExpirationDays)
+
 	var s models.Session
 	var uid, _ = uuid.NewUUID()
 	s.ID = uid.String()
 	s.UserID = u.ID
-	s.ExpiresAt = time.Now().Add(time.Hour * 24 * 30)
+	s.ExpiresAt = time.Now().Add(time.Hour * 24 * time.Duration(expirationDays))
 	err = s.Insert(ctx, cc.DB, boil.Infer())
 	if err != nil {
 		return echo.NewHTTPError(http.StatusInternalServerError)
@@ -54,11 +57,12 @@ func CreateSession(c echo.Context) error {
 	if err != nil {
 		return echo.NewHTTPError(http.StatusInternalServerError)
 	}
+
 	cookie := &http.Cookie{
 		Name:     "session",
 		Value:    encoded,
 		Path:     "/",
-		Expires:  time.Now().Add(time.Hour * 24 * 30),
+		Expires:  time.Now().Add(time.Hour * 24 * time.Duration(expirationDays)),
 		Secure:   !cc.Config.IsDev,
 		HttpOnly: true,
 		SameSite: 2,