Feat: delete objects

middleware/session.go

@@ -28,6 +28,7 @@ func Session(secret string) gin.HandlerFunc {
 	}
 
 	// Also set Secure: true if using SSL, you should though
+	// TODO:same-site policy
 	Store.Options(sessions.Options{HttpOnly: true, MaxAge: 7 * 86400, Path: "/"})
 	return sessions.Sessions("cloudreve-session", Store)
 }