feat: create session cookie tied to access token

1 files changed, 22 insertions, 0 deletions

diff --git a/pkg/web/cookie/new.go b/pkg/web/cookie/new.go
new file mode 100644
index 0000000..2809640
--- /dev/null
+++ b/pkg/web/cookie/new.go
@@ -0,0 +1,22 @@
+package cookie
+
+import (
+	"net/http"
+	"time"
+
+	"github.com/xlgmokha/x/pkg/env"
+)
+
+func New(name, value string, expires time.Time) *http.Cookie {
+	return &http.Cookie{
+		Name:    name,
+		Value:   value, // TODO:: digitally sign the value
+		Expires: expires,
+		MaxAge:  int(time.Until(expires).Seconds()),
+		Path:    "/",
+		// HttpOnly: true,
+		// Secure:   true,
+		SameSite: http.SameSiteDefaultMode,
+		Domain:   env.Fetch("HOST", "localhost"),
+	}
+}