ports/www/lua-resty-session3/pkg-descr
Baptiste Grenier dfd76d0001 www/lua-resty-session3: port sticking to version 3
This is based upon www/lua-resty-session (v4), but is needed for
lua-resty-openidc.

The version 3.x is pinned in the lua-resty-openidc dependencies:
    9f3a4fcade/lua-resty-openidc-1.7.6-3.rockspec (L27)

There is apparently currently no clear plan on when/if lua-resty-openidc
will be updated to include changes for lua-resty-session 4.X, see
discussions on
    https://github.com/zmartzone/lua-resty-openidc/issues/480

Additionally to what the author submitted some changes by me:
 - add conflicts with www/lua-resty-session
 - give up maintainership of www/lua-resty-session

PR:		281142
2024-09-18 18:02:45 +02:00

8 lines
493 B
Text

Lua session library for OpenResty / ngx_lua
Features:
- Sessions are immutable (each save generates a new session), and lockless.
- Session data is AES-256-GCM encrypted with a key derived using HKDF-SHA256.
- Session has a fixed size header that is protected with HMAC-SHA256 MAC with a key derived using HKDF-SHA256.
- Session data can be stored in a stateless cookie or in various backend storages.
- A single session cookie can maintain multiple sessions across different audiences.