使用net / http设置cookie

时间:2012-08-26 13:38:35

标签: cookies go

我正在尝试使用Go的net / http包设置Cookie。我有:

package main

import "io"
import "net/http"
import "time"

func indexHandler(w http.ResponseWriter, req *http.Request) {
    expire := time.Now().AddDate(0, 0, 1)
    cookie := http.Cookie{"test", "tcookie", "/", "www.domain.com", expire, expire.Format(time.UnixDate), 86400, true, true, "test=tcookie", []string{"test=tcookie"}}
    req.AddCookie(&cookie)
    io.WriteString(w, "Hello world!")
}

func main() {
    http.HandleFunc("/", indexHandler)
    http.ListenAndServe(":80", nil)
}

我尝试用'cookies'谷歌搜索'Golang',但没有得到任何好结果。如果有人能指出我正确的方向,我们将不胜感激。

7 个答案:

答案 0 :(得分:81)

我不是Go专家,但我认为你是根据请求设置cookie,不是吗?您可能希望在响应中设置它。 net / http中有setCookie个函数。这可能有所帮助: http://golang.org/pkg/net/http/#SetCookie

func SetCookie(w ResponseWriter, cookie *Cookie)

答案 1 :(得分:9)

//ShowAllTasksFunc is used to handle the "/" URL which is the default ons
func ShowAllTasksFunc(w http.ResponseWriter, r *http.Request){
    if r.Method == "GET" {
        context := db.GetTasks("pending") //true when you want non deleted notes
        if message != "" {
            context.Message = message
        }
        context.CSRFToken = "abcd"
        message = ""
        expiration := time.Now().Add(365 * 24 * time.Hour)
        cookie    :=    http.Cookie{Name: "csrftoken",Value:"abcd",Expires:expiration}
        http.SetCookie(w, &cookie)
        homeTemplate.Execute(w, context)
    } else {
        message = "Method not allowed"
        http.Redirect(w, r, "/", http.StatusFound)
    }
}

RequestsResponseWriter之间存在基本差异,请求是浏览器发送的内容,如

Host: 127.0.0.1:8081
User-Agent: ...
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Referer: http://127.0.0.1:8081/
Cookie: csrftoken=abcd
Connection: keep-alive

并且响应是处理程序将发送的内容,例如:

Content-Type: text/html; charset=utf-8
Date: Tue, 12 Jan 2016 16:43:53 GMT
Set-Cookie: csrftoken=abcd; Expires=Wed, 11 Jan 2017 16:43:53 GMT
Transfer-Encoding: chunked
<html>...</html>

当浏览器发出请求时,它会包含该域的cookie,因为cookie是以域名方式存储的,如果您将cookie设置为HTTP,则无法从跨域访问它只能从通过HTTP而不是通过JS设置它的网站访问。

因此,当从cookie中获取信息时,您可以使用r.Cookie方法执行此操作,如此

cookie, _ := r.Cookie("csrftoken")
if formToken == cookie.Value {

https://github.com/thewhitetulip/Tasks/blob/master/views/addViews.go#L72-L75

但是当你要设置一个cookie时,你必须在响应编写器方法中执行它,请求是一个我们响应的只读对象,将其视为你从某人那里得到的文本消息,即一个请求,你只能得到它,你输入的是一个响应,所以你可以在

输入一个cookie

了解更多详情:https://thewhitetulip.gitbooks.io/webapp-with-golang-anti-textbook/content/content/2.4workingwithform.html

答案 2 :(得分:5)

以下代码可以帮助您

    cookie1 := &http.Cookie{Name: "sample", Value: "sample", HttpOnly: false}
    http.SetCookie(w, cookie1)

答案 3 :(得分:3)

下面显示了我们如何在产品中使用Cookie:

func handleFoo(w http.ResponseWriter, r *http.Request) {

    // cookie will get expired after 1 year 
    expires := time.Now().AddDate(1, 0, 0)

    ck := http.Cookie{
        Name: "JSESSION_ID",
        Domain: "foo.com",
        Path: "/",
        Expires: expires,
    }

    // value of cookie    
    ck.Value = "value of this awesome cookie"

    // write the cookie to response
    http.SetCookie(w, &ck)

    // ...
}

答案 4 :(得分:1)

在我添加Path和MaxAge之前,它在Safari中不起作用。安全和常规cookie都适合我

分享,以便帮助像我一样被困2天以上的人:)

expire := time.Now().Add(20 * time.Minute) // Expires in 20 minutes
cookie := http.Cookie{Name: "username", Value: "nonsecureuser", Path: "/", Expires: expire, MaxAge: 86400}
http.SetCookie(w, &cookie)
cookie = http.Cookie{Name: "secureusername", Value: "secureuser", Path: "/", Expires: expire, MaxAge: 86400, HttpOnly: true, Secure: true}
http.SetCookie(w, &cookie)

答案 5 :(得分:1)

首先,您需要创建Cookie,然后使用http包的SetCookie()函数设置cookie。

expire := time.Now().Add(10 * time.Minute) 
cookie := http.Cookie{Name: "User", Value: "John", Path: "/", Expires: expire, MaxAge: 90000}
http.SetCookie(w, &cookie)

答案 6 :(得分:-2)

你可以使用gorilla包来处理cookie,或者我会说安全的cookie:http://www.gorillatoolkit.org/pkg/securecookie