To run this application, build and run the Go binary:
go build
./go-session-auth-example
Now, using any HTTP client with support for cookies (like Postman, or your web browser) make a sign-in request with the appropriate credentials:
POST https://localhost:8080/signin
{"username":"user2","password":"password2"}
You can now try hitting the welcome route from the same client to get the welcome message:
GET https://localhost:8080/welcome
Hit the refresh route, and then inspect the clients cookies to see the new value of the session_token
:
POST https://localhost:8080/refresh
Finally, call the logout route to clear session data:
GET https://localhost:8080/logout
Calling the welcome and refresh routes after this will result in a 401
error.