Minor cleanup of challenges code, bind session http cookies to issued tokens

utils/cookie.go

@@ -0,0 +1,27 @@
+package utils
+
+import (
+	"net/http"
+	"time"
+)
+
+var CookiePrefix = ".go-away-"
+
+func SetCookie(name, value string, expiry time.Time, w http.ResponseWriter) {
+	http.SetCookie(w, &http.Cookie{
+		Name:     name,
+		Value:    value,
+		Expires:  expiry,
+		SameSite: http.SameSiteLaxMode,
+		Path:     "/",
+	})
+}
+func ClearCookie(name string, w http.ResponseWriter) {
+	http.SetCookie(w, &http.Cookie{
+		Name:     name,
+		Value:    "",
+		Expires:  time.Now().Add(-1 * time.Hour),
+		MaxAge:   -1,
+		SameSite: http.SameSiteLaxMode,
+	})
+}