Bob Aman

Yeah, having now taken a closer look at the code, it looks like what it's doing is actually incorrect and will cause caching problems. Because you're attaching the ETag to...

Hmm, OK. That honestly sounds pretty limiting. Basically that works for static content that you're serving with something other than the normal static handler. Incidentally, that's actually what I'm doing,...

Yeah, I'm trying to get this to work for Grafana and Prometheus, with similar issues.

I'm starting to work on this now, will take a close look at the Redis stuff @brianv0 mentioned.

I probably won't make this change in the upcoming PR, but I think there's a good case to be made to rename `CookieSecret`/`COOKIE_SECRET` to `SessionSecret`/`SESSION_SECRET` subsequent to this PR. Also...

I initially started porting the code @brianv0 mentioned, but ended up finding it hard to reason about the security guarantees it seemed to be trying to make. Opted to write...

Took some doing, but I got Redis sessions working. PR coming soon.

@jphines Some minor feedback: The `mapstructure` / `go-micro` config stuff is way too magical with way too many non-obvious gotchas. If it wasn't for `dlv` I'm not sure I ever...

@malizz for visibility

Is it possible to do request signing with not-RSA?