session is prepared, and now starts to make sure login works.

apiV1Response.go

 package main
 
 import (
-	"biukop.com/sfm/loan"
+	"biukop/sfm/loan"
 	"encoding/json"
 	"fmt"
 	"net/http"
 	Msg       string
 	TimeStamp string
 	Body      interface{}
+	Session   loan.Session
 }
 
 type apiV1Response struct {

apiV1login.go

 package main
 
 import (
+	"biukop/sfm/loan"
 	log "github.com/sirupsen/logrus"
 	"net/http"
 	"time"
 	ts    time.Time
 }
 
-func apiV1Login(w http.ResponseWriter, r *http.Request) {
+func apiV1Login(w http.ResponseWriter, r *http.Request, ss *loan.Session) {
 	res := apiV1ResponseBlank()
 
 	l := login{}

apiv1.go

 package main
 
 import (
+	"biukop/sfm/loan"
 	"net/http"
 	"net/http/httputil"
 )
 type apiV1HandlerMap struct {
 	Method  string
 	Path    string //regex
-	Handler func(http.ResponseWriter, *http.Request)
+	Handler func(http.ResponseWriter, *http.Request, *loan.Session)
 }
 
 var apiV1Handler = []apiV1HandlerMap{
 	w.Header().Set("Content-Type", "application/json;charset=UTF-8")
 	path := r.URL.Path[len(apiV1Prefix):] //strip API prefix
 
+	session := loan.Session{}
+	session.Retrieve(r) //TODO: check remote_addr changes in DB, to prevent possible Hack
+
 	for _, node := range apiV1Handler {
 		if r.Method == node.Method && path == node.Path {
-			node.Handler(w, r)
+			node.Handler(w, r, &session)
 			return
 		}
 	}
 	//Catch for all
-	apiV1DumpRequest(w, r)
+	apiV1DumpRequest(w, r, &session)
 }
 
 func apiV1ErrorCheck(e error) {

config.go

 }
 
 type configuration struct {
-	Host   string
-	Port   string
-	Static []configStaticHtml
+	Host    string
+	Port    string
+	Static  []configStaticHtml
+	Session struct {
+		Guest bool
+		Year  int //how many years
+		Month int //how many years
+		Day   int //how many years
+	}
 }
 
 var configFile = "config.json"

config.json

       "StaticUrl": "/spa2/",
       "StripPrefix" : "/spa2/"
     }
-  ]
+  ],
+  "Session" : {
+    "Guest": true,
+    "Year": 10,
+    "Month": 1,
+    "Day": 1
+  }
 }

go.mod

-module SFM_Loan_RestApi
+module biukop/sfm/apiv1
 
 go 1.15
 
-replace biukop.com/sfm/loan => /home/sp/GolandProjects/SFM-loan
+replace biukop/sfm/loan => /home/sp/GolandProjects/SFM-loan
 
 require (
-	biukop.com/sfm/loan v0.0.0-00010101000000-000000000000
+	biukop/sfm/loan v0.0.0-00010101000000-000000000000
 	github.com/VividCortex/mysqlerr v0.0.0-20201215173831-4c396ae82aac
 	github.com/brianvoe/gofakeit/v6 v6.0.1
 	github.com/go-sql-driver/mysql v1.5.0

main.go

 package main
 
 import (
-	"biukop.com/sfm/loan"
+	"biukop/sfm/loan"
 	"encoding/json"
 	"fmt"
 	log "github.com/sirupsen/logrus"
 	if e == nil {
 		fmt.Fprint(w, string(b))
 	} else {
-		apiV1DumpRequest(w, nil)
+		apiV1DumpRequest(w, nil, nil)
 	}
 }
 
-func apiV1DumpRequest(w http.ResponseWriter, r *http.Request) {
+func apiV1DumpRequest(w http.ResponseWriter, r *http.Request, ss *loan.Session) {
 	dump := logRequestDebug(httputil.DumpRequest(r, true))
 	dump = strings.TrimSpace(dump)
 	msg := fmt.Sprintf("Unhandled Protocol = %s path= %s", r.Method, r.URL.Path)
 	dumpLines := strings.Split(dump, "\r\n")
 	ar := apiV1ResponseBlank()
 	ar.Env.Msg = msg
+	ar.Env.Session = *ss
+	ar.Env.Session.Secret = "***********"
 	ar.add("Body", dumpLines)
 	b, _ := ar.toJson()
 	fmt.Fprintf(w, "%s\n", b)