How to work with sessions in golang?

Question

go

Hello, I ask for help in explaining the principle of working with sessions.
I can not understand the principle of working with sessions (I use Gorilla sessions and redis).
Here for example:
I do authorization of the user. The user enters data, then they are checked against the database, and if everything is correct, then a session should be generated? Suppose we have generated a session, and what's next, roughly speaking, how to understand that Ivan is Ivan and not Kolya?
The next question is, what does "something-very-secret" in the store variable do and why is it needed?

var store = sessions.NewCookieStore([]byte("something-very-secret")) // что это за secret key и зачем он используется

    func MyHandler(w http.ResponseWriter, r *http.Request) {
        session, _ := store.Get(r, "session-name")
        session.Values["foo"] = "bar"
        session.Values[42] = 43
        session.Save(r, w)
    }

And the last question, on the Gorilla sessions page I came across the package https://github.com/boj/redistore , why is it needed?
Thanks in advance!

Answer 1

The user enters data, then they are checked against the database, and if everything is correct, then a session should be generated?

Right.
Well, inside the session, the user id is usually stored in encrypted form.
session.Values["user_id"] = "123"
This is the encryption key. To store data in browser cookies not in clear text, but in encrypted form.
This is a way to store sessions on the backend, in this case a radish database.
But, this method should be approached when it is really needed.

Answer 2

What for docks to read the truth?
https://godoc.org/gopkg.in/boj/redistore.v1
www.gorillatoolkit.org/pkg/sessions

Answer 3

how to understand that Ivan is Ivan and not Kolya

session.Values["userID"] = "some-user-id"
Used to encrypt the session. Can take any value.
For storing sessions in radish) ...