Work-around Session Filestore fallback bug

gorilla Session creation isn't handled correctly when MaxAge is unset. Work around upstream bug[1] by explicitly setting MaxAge. [1] gorilla/sessions#96
cloud-gov · Jan 13, 2017 · f533296 · f533296
1 parent 8bae770
commit f533296
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/helpers/settings.go b/helpers/settings.go
@@ -120,6 +120,9 @@ func (s *Settings) InitSettings(envVars EnvVars, env *cfenv.App) error {
 		store.MaxLength(4096 * 4)
 		store.Options = &sessions.Options{
 			HttpOnly: true,
+			// TODO remove this; work-around for
+			// https://github.com/gorilla/sessions/issues/96
+			MaxAge: 60 * 60 * 24 * 7,
 			Secure:   s.SecureCookies,
 		}
 		s.Sessions = store