Sessions are keyed by a session_id so we can just store anything. Adding the user_id for later authorization stuff.

api/auth.go

@@ -112,8 +112,8 @@ func PostApiLogin(c *fiber.Ctx) error {
     sess, err := STORE.Get(c)
     if err != nil { return IfErrNil(err, c) }
 
-    // BUG: THIS IS A BIG NO NO, just for getting going
     sess.Set("authenticated", true)
+    sess.Set("user_id", user.Id)
     sess.Set("admin", IsAdmin(&user))
     err = sess.Save()
     if err != nil { return IfErrNil(err, c) }