roblillack / mars / 14856278766

60%

push

github

session: Use SHA256/base64 for cookie hashing/encoding, enforce random secret if unspecified. (#27)

* WIP

* session: Switch to SHA-256/Base64 instead of SHA1/Hex.

* Enforce random app secret

* Move hashing functionality to new files. Separate Cookie content with / instead of -.

* Try enabling Secure & HttpOnly cookies by default.

* Set default session length to 24 hours

* Add fuzz tests for session decoding.

* Add test for random app secrets.

* Use internal setup() for test

35 of 36 new or added lines in 3 files covered. (97.22%)

2807 of 4669 relevant lines covered (60.12%)

2.03 hits per line