Allow session key from env

1 files changed, 11 insertions, 3 deletions

diff --git a/session.go b/session.go
index 382a302..3718623 100644
--- a/session.go
+++ b/session.go
@@ -5,6 +5,7 @@ import (
 	"encoding/gob"
 	"log"
 	"net/http"
+	"os"
 
 	"github.com/gorilla/securecookie"
 	"github.com/gorilla/sessions"
@@ -16,11 +17,8 @@ const (
 	dataKey           = "data"
 )
 
-var sessionStore sessions.Store
-
 func init() {
 	gob.Register(SessionData{})
-	sessionStore = sessions.NewCookieStore(securecookie.GenerateRandomKey(32))
 }
 
 type Session struct {
@@ -61,6 +59,16 @@ func session(r *http.Request) Session {
 }
 
 func sessionHandler(next http.Handler) http.Handler {
+	var key []byte
+
+	if envKey := os.Getenv("GOSTEN_SECRET"); len(envKey) >= 32 {
+		key = []byte(envKey)
+	} else {
+		key = securecookie.GenerateRandomKey(32)
+	}
+
+	sessionStore := sessions.NewCookieStore(key)
+
 	return http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		session, _ := sessionStore.Get(r, sessionCookie)