Enhance Web Pannel Security by setting session valid time

vaxilu · Apr 23, 2022 · 6c5bbfe · 6c5bbfe
1 parent b616a5b
commit 6c5bbfe
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/web/session/session.go b/web/session/session.go
@@ -2,9 +2,10 @@ package session
 
 import (
 	"encoding/gob"
+	"x-ui/database/model"
+
 	"github.com/gin-contrib/sessions"
 	"github.com/gin-gonic/gin"
-	"x-ui/database/model"
 )
 
 const (
@@ -18,6 +19,10 @@ func init() {
 func SetLoginUser(c *gin.Context, user *model.User) error {
 	s := sessions.Default(c)
 	s.Set(loginUser, user)
+	s.Options(sessions.Options{
+		MaxAge: 7200,
+		Secure: true,
+	})
 	return s.Save()
 }