package auth import ( "net/http" "time" ) const CookieName = "ss_token" func SetAuthCookie(w http.ResponseWriter, token string, expiresAt time.Time) { http.SetCookie(w, &http.Cookie{ Name: CookieName, Value: token, Path: "/", Expires: expiresAt, HttpOnly: true, Secure: false, SameSite: http.SameSiteStrictMode, }) } func ClearAuthCookie(w http.ResponseWriter) { http.SetCookie(w, &http.Cookie{ Name: CookieName, Value: "", Path: "/", Expires: time.Unix(0, 0), HttpOnly: true, Secure: false, SameSite: http.SameSiteStrictMode, }) } func GetTokenFromRequest(r *http.Request) string { cookie, err := r.Cookie(CookieName) if err != nil { return "" } return cookie.Value }