systemprompt-api 0.72.1

Axum-based HTTP server and API gateway for systemprompt.io AI governance infrastructure. Exposes governed agents, MCP, A2A, and admin endpoints with rate limiting and RBAC.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

//! The browser session cookie and the redirect that sets it, shared by the
//! SSO callbacks.
//!
//! Copyright (c) systemprompt.io — Business Source License 1.1.
//! See <https://systemprompt.io> for licensing details.

use axum::http::{HeaderValue, header};
use axum::response::{IntoResponse, Redirect, Response};

pub fn session_cookie_redirect(
    access_token: &str,
    destination: &str,
    max_age_secs: i64,
) -> Response {
    // Why: an SSO callback is reached by a cross-site redirect from the IdP;
    // browsers withhold a `SameSite=Strict` cookie on the redirect that
    // follows, so the session would never arrive. `Lax` is the OIDC norm.
    let cookie = format!(
        "access_token={access_token}; Path=/; HttpOnly; Secure; SameSite=Lax; \
         Max-Age={max_age_secs}"
    );

    let mut response = Redirect::to(destination).into_response();
    if let Ok(cookie_value) = HeaderValue::from_str(&cookie) {
        response
            .headers_mut()
            .append(header::SET_COOKIE, cookie_value);
    }

    response
}