update

cmd/checkout/utils.go

@@ -5,6 +5,7 @@ import (
 	"log"
 	"net/http"
 	"strings"
+	"time"
 
 	"git.k6n.net/go-cart-actor/pkg/cart"
 	"git.k6n.net/go-cart-actor/pkg/checkout"
@@ -64,29 +65,45 @@ func (a *CheckoutPoolServer) reserveInventory(ctx context.Context, grain *checko
 	return nil
 }
 
-func CheckoutIdHandler(fn func(w http.ResponseWriter, r *http.Request, checkoutId checkout.CheckoutId) error) func(w http.ResponseWriter, r *http.Request) {
+const checkoutCookieName = "checkoutid"
+
+func setCheckoutCookie(w http.ResponseWriter, checkoutId checkout.CheckoutId, tls bool) {
+	http.SetCookie(w, &http.Cookie{
+		Name:     checkoutCookieName,
+		Value:    checkoutId.String(),
+		Secure:   tls,
+		HttpOnly: true,
+		Path:     "/",
+		Expires:  time.Now().AddDate(0, 0, 14),
+		SameSite: http.SameSiteLaxMode,
+	})
+}
+
+func CookieCheckoutIdHandler(fn func(w http.ResponseWriter, r *http.Request, checkoutId checkout.CheckoutId) error) func(w http.ResponseWriter, r *http.Request) {
 	return func(w http.ResponseWriter, r *http.Request) {
+
 		var id checkout.CheckoutId
-		raw := r.PathValue("id")
-		if raw == "" {
-			id = checkout.CheckoutId(cart.MustNewCartId())
-			w.Header().Set("Set-Checkout-Id", id.String())
+		cookie, err := r.Cookie(checkoutCookieName)
+		if err != nil || cookie.Value == "" {
+			w.WriteHeader(http.StatusNotAcceptable)
+			return
 		} else {
-			if parsedId, ok := cart.ParseCartId(raw); !ok {
-				w.WriteHeader(http.StatusBadRequest)
-				w.Write([]byte("checkout id is invalid"))
+			parsed, ok := cart.ParseCartId(cookie.Value)
+			if !ok {
+				w.WriteHeader(http.StatusNotAcceptable)
 				return
 			} else {
-				id = checkout.CheckoutId(parsedId)
+				id = parsed
 			}
 		}
 
-		err := fn(w, r, id)
+		err = fn(w, r, id)
 		if err != nil {
 			log.Printf("Server error, not remote error: %v\n", err)
 			w.WriteHeader(http.StatusInternalServerError)
 			w.Write([]byte(err.Error()))
 		}
+
 	}
 }