Unify CookieOptions config for AuthUtils

OpenShock · Dec 19, 2024 · d47ee88 · d47ee88
1 parent aa3700c
commit d47ee88
Showing 1 changed file with 10 additions and 12 deletions.
diff --git a/Common/Utils/AuthUtils.cs b/Common/Utils/AuthUtils.cs
@@ -15,28 +15,26 @@ public static class AuthUtils
         "Device-Token"
     ];
 
-    public static void SetSessionKeyCookie(this HttpContext context, string sessionKey, string domain)
+    private static CookieOptions GetCookieOptions(string domain, TimeSpan lifetime)
     {
-        context.Response.Cookies.Append(AuthConstants.UserSessionCookieName, sessionKey, new CookieOptions
+        return new CookieOptions
         {
-            Expires = new DateTimeOffset(DateTime.UtcNow.Add(Duration.LoginSessionLifetime)),
+            Expires = new DateTimeOffset(DateTime.UtcNow.Add(lifetime)),
             Secure = true,
             HttpOnly = true,
             SameSite = SameSiteMode.Strict,
             Domain = domain
-        });
+        };
+    }
+
+    public static void SetSessionKeyCookie(this HttpContext context, string sessionKey, string domain)
+    {
+        context.Response.Cookies.Append(AuthConstants.UserSessionCookieName, sessionKey, GetCookieOptions(domain, Duration.LoginSessionLifetime));
     }
 
     public static void RemoveSessionKeyCookie(this HttpContext context, string domain)
     {
-        context.Response.Cookies.Append(AuthConstants.UserSessionCookieName, string.Empty, new CookieOptions
-        {
-            Expires = DateTime.Now.AddDays(-1),
-            Secure = true,
-            HttpOnly = true,
-            SameSite = SameSiteMode.Strict,
-            Domain = domain
-        });
+        context.Response.Cookies.Append(AuthConstants.UserSessionCookieName, string.Empty, GetCookieOptions(domain, TimeSpan.FromDays(-1)));
     }
 
     public static bool TryGetUserSession(this HttpContext context, [NotNullWhen(true)] out string? sessionToken)