can't read sessions on posted page? about iris HOT 4 CLOSED

Thank you very much!

from iris.

I tested the below, which is identical to your use case and works as expected, please make good post issues I don't have the necessary info to help you... try to find out what your rest application does and fails on you

	app := iris.New()

	cookieName := "mycustomsessionid"
	// AES only supports key sizes of 16, 24 or 32 bytes.
	// You either need to provide exactly that amount or you derive the key from what you type in.
	hashKey := []byte("the-big-and-secret-fash-key-here")
	blockKey := []byte("lot-secret-of-characters-big-too")
	secureCookie := securecookie.New(hashKey, blockKey)

	mySessions := sessions.New(sessions.Config{
		Cookie: cookieName,
		Encode: secureCookie.Encode,
		Decode: secureCookie.Decode,
                Expires: time.Hour * 1,
	})

	app.Post("/set_boolean", func(ctx context.Context) {
		s := mySessions.Start(ctx)
		s.Set("authenticated", true)
		s.Set("UserId", "42")
		ctx.Redirect("/get_boolean")
	})

	app.Get("/get_boolean", func(ctx context.Context) {
		s := mySessions.Start(ctx)
		auth, err := s.GetBoolean("authenticated")
		if !auth || err != nil {
			ctx.Writef("expected authenticated to be true!\n")
		}
		if userid := s.Get("UserId"); userid != "42" {
			ctx.Writef("expected UserId to be 42!")
		}
	})

from iris.

I found why it doesn't work, that's cause the browser cookie in response. The cookie is sent with empty value:

It should be like this:

from iris.

The problem is your hashKey, the length is too short, it must be 32 ou 68 octets. That's why, the cookie name is empty.

As it say in SecureCookie documentation:

// hashKey is required, used to authenticate values using HMAC. Create it using
// GenerateRandomKey(). It is recommended to use a key with 32 or 64 bytes.
//
// blockKey is optional, used to encrypt values. Create it using
// GenerateRandomKey(). The key length must correspond to the block size
// of the encryption algorithm. For AES, used by default, valid lengths are
// 16, 24, or 32 bytes to select AES-128, AES-192, or AES-256.
// The default encoder used for cookie serialization is encoding/gob.

from iris.