slipway.auth — io.operatr/slipway-core 1.0.7

->same-site clj

(->same-site same-site)

->tracking-mode clj

(->tracking-mode mode)

configurator clj

(configurator server
              {:keys [auth-method login-uri login-retry-uri constraint-mappings
                      session cookie]
               :as opts})

default-login-redirect clj

(default-login-redirect target
                        request
                        {:keys [login-uri login-retry-uri post-login-uri-attr]})

When logging in we have some special cases to consider with the post-login uri

login-service clj multimethod

maybe-logout clj

(maybe-logout base-request opts)

Invalidate the session IFF the URI is /logout

session-handler clj

(session-handler {:keys [secure-request-only? http-only? same-site
                         max-inactive-interval tracking-modes cookie-name]
                  :or {max-inactive-interval -1
                       secure-request-only? true
                       http-only? true
                       same-site :strict
                       cookie-name "JSESSIONID"
                       tracking-modes #{:cookie}}})

user clj

(user req)

Derive user credentials (name + roles) from a base jetty request