SCS v2 Multiple Sessions

gist.go

package main

import (
	"database/sql"
	"fmt"
	"log"
	"net/http"
	"time"

	"github.com/alexedwards/scs/v2"
	"github.com/alexedwards/scs/postgresstore"

	_ "github.com/lib/pq"
)

var sessionOne, sessionTwo *scs.Session

func main() {
	db, err := sql.Open("postgres", "postgres://user:pass@localhost/db")
	if err != nil {
		log.Fatal(err)
	}
	defer db.Close()

	// Initialize and configure a session manager with long-lived sessions using
	// the PostgreSQL session store.
	sessionOne = scs.NewSession()
	sessionOne.Store = postgresstore.New(db)
	sessionOne.Lifetime = 72 * time.Hour
	sessionOne.Cookie.Name = "sessionOne" // Important: This must be unique; two sessions should not have the same cookie name.

	// Initialize and configure another session manager with short-lived sessions
	// using the default in-memory session store.
	sessionTwo = scs.NewSession()
	sessionTwo.Lifetime = 10 * time.Minute
	sessionTwo.Cookie.Name = "sessionTwo" // Important: This must be unique; two sessions should not have the same cookie name.

	mux := http.NewServeMux()
	mux.HandleFunc("/put", putHandler)
	mux.HandleFunc("/get", getHandler)

	http.ListenAndServe(":4000", sessionOne.LoadAndSave(sessionTwo.LoadAndSave(mux)))
}

func putHandler(w http.ResponseWriter, r *http.Request) {
	sessionOne.Put(r.Context(), "messageOne", "Hello from sessionOne")
	sessionTwo.Put(r.Context(), "messageTwo", "Hello from sessionTwo")
}

func getHandler(w http.ResponseWriter, r *http.Request) {
	msg := sessionOne.GetString(r.Context(), "messageOne")
	fmt.Fprintln(w, msg)

	msg = sessionTwo.GetString(r.Context(), "messageTwo")
	fmt.Fprintln(w, msg)
}

@alexedwards Can you help to solve,

curl -i --cookie-jar cj --cookie cj localhost:7777/get
HTTP/1.1 200 OK
Vary: Cookie
Vary: Cookie
Date: Tue, 22 Apr 2025 18:47:04 GMT
Content-Length: 2
Content-Type: text/plain; charset=utf-8


curl -i --cookie-jar cj --cookie cj localhost:7777/put
HTTP/1.1 200 OK
Cache-Control: no-cache="Set-Cookie"
Cache-Control: no-cache="Set-Cookie"
Set-Cookie: sessionTwo=0FqPT4suZfDjwc2pEMjN7HWUqVma2Ys1wPMI5uDMrEg; Path=/; Expires=Fri, 25 Apr 2025 18:47:13 GMT; Max-Age=259200; HttpOnly; SameSite=Lax
Set-Cookie: sessionOne=VxQgqSZwt8VZnlHu_4a9hJQeyZ3ofHC3MEw54B1hVU8; Path=/; Expires=Fri, 25 Apr 2025 18:47:13 GMT; Max-Age=259200; HttpOnly; SameSite=Lax
Vary: Cookie
Vary: Cookie
Date: Tue, 22 Apr 2025 18:47:12 GMT
Content-Length: 0


curl -i --cookie-jar cj --cookie cj localhost:7777/get
HTTP/1.1 200 OK
Vary: Cookie
Vary: Cookie
Date: Tue, 22 Apr 2025 18:47:24 GMT
Content-Length: 44
Content-Type: text/plain; charset=utf-8

Hello from sessionOne
Hello from sessionTwo

How to not duplicate cookies Vary and Cache-Control? As in another your example, - to write a custom middleware?