深入理解Go语言Gorilla Sessions：常见问题与最佳实践

var store = sessions.NewCookieStore([]byte("something-very-secret"))

func init() {
    store.Options = &sessions.Options{
        Domain:   "localhost", // 根据实际部署域名调整
        Path:     "/",         // 确保Cookie在整个应用范围内有效
        MaxAge:   3600 * 8,    // 会话有效期，例如8小时
        HttpOnly: true,       // 防止客户端脚本访问Cookie，增加安全性
    }
}

func SessionHandler(res http.ResponseWriter, req *http.Request) {
    session, err := store.Get(req, "loginSession")
    if err != nil {
        // 错误处理：例如记录日志，并重定向到错误页面或登录页
        fmt.Printf("Error getting session: %v\n", err)
        http.Redirect(res, req, "html/login.html", http.StatusFound)
        return
    }

    if val, ok := session.Values["email"].(string); ok {
        // 如果email值是字符串类型
        if val == "" {
            // email为空字符串，视为未登录
            http.Redirect(res, req, "html/login.html", http.StatusFound)
        } else {
            // email不为空，视为已登录
            http.Redirect(res, req, "html/home.html", http.StatusFound)
        }
    } else {
        // 如果email值不存在或者不是字符串类型，视为未登录
        http.Redirect(res, req, "html/login.html", http.StatusFound)
    }
    // ... 其他逻辑，例如服务静态文件，但应在会话验证之后
}

// 在SignInHandler中保存会话时
sessionNew.Values["email"] = email
sessionNew.Values["name"] = firstname

err := sessionNew.Save(req, res) // 检查错误
if err != nil {
    // 处理会话保存失败的错误，例如记录日志，并向用户显示错误信息
    fmt.Printf("Error saving session: %v\n", err)
    http.Error(res, "Failed to save session", http.StatusInternalServerError)
    return
}

// main函数中的路由配置示例
func main() {
    router.HandleFunc("/", SessionHandler)
    router.HandleFunc("/signIn", SignInHandler)
    router.HandleFunc("/signUp", SignUpHandler)
    router.HandleFunc("/logOut", LogOutHandler)

    // 将静态文件服务配置为独立的路由，通常放在最后，作为备用匹配
    // 或者为静态文件指定一个特定的前缀，例如 /static/
    router.PathPrefix("/static/").Handler(http.StripPrefix("/static/", http.FileServer(http.Dir("../static/"))))

    http.Handle("/", router)
    http.ListenAndServe(":8100", nil)
}

// 修正后的SessionHandler
func SessionHandler(res http.ResponseWriter, req *http.Request) {
    session, err := store.Get(req, "loginSession")
    if err != nil {
        fmt.Printf("Error getting session: %v\n", err)
        http.Redirect(res, req, "/html/login.html", http.StatusFound)
        return
    }

    if val, ok := session.Values["email"].(string); ok && val != "" {
        // 已登录，重定向到主页
        http.Redirect(res, req, "/html/home.html", http.StatusFound)
    } else {
        // 未登录，重定向到登录页
        http.Redirect(res, req, "/html/login.html", http.StatusFound)
    }
}

import "golang.org/x/crypto/bcrypt" // 推荐使用此包

// 注册时哈希密码
func HashPassword(password string) (string, error) {
    bytes, err := bcrypt.GenerateFromPassword([]byte(password), bcrypt.DefaultCost)
    return string(bytes), err
}

// 登录时验证密码
func CheckPasswordHash(password, hash string) bool {
    err := bcrypt.CompareHashAndPassword([]byte(hash), []byte(password))
    return err == nil
}

// Cassandra连接和查询示例（gocql库）
// 注意：gocql的Query方法本身就支持参数化查询
cluster := gocql.NewCluster("localhost")
cluster.Keyspace = "gbuy"
session, _ := cluster.CreateSession()
defer session.Close()

// 登录查询示例
var firstname string
// 使用问号占位符进行参数化查询
err := session.Query("SELECT firstname FROM USER WHERE email = ? AND password = ?", email, encrypted_password).Scan(&firstname)
if err != nil {
    // 处理错误
}

// 注册插入示例
// 使用问号占位符进行参数化插入
stmt := "INSERT INTO USER (email, firstname, lastname, birthdate, city, gender, password, creation_date) VALUES (?, ?, ?, ?, ?, ?, ?, ?);"
err = session.Query(stmt, email, fName, lName, birthdate, city, gender, encrypted_password, sysdate).Exec()
if err != nil {
    // 处理错误
}