How to start a session manually?

[araeubig]

Perhaps this is a silly question but when i set "start_session" to false, how i could start the session manually?

All tries were not succesful. Why do I want to start the session manually? Because I want to start the session after verifying a key.

[n0nag0n]

Not a silly question — but you probably don't need start_session => false for this.

You can start the session normally and verify your key when you need to. Only save data to the session after the key is valid.

$app->register('session', Session::class);

Flight::route('/protected', function() {
    $apiKey = Flight::request()->getHeader('X-API-Key') ?? '';

    if (!isValidApiKey($apiKey)) {
        Flight::halt(401, 'Invalid API key');
    }

    $session = Flight::session();
    $session->set('authenticated', true);
});

About manual start: There is no public start() method right now. If start_session is false, the handler is not registered, so calling session_start() yourself will not work with this library.

For API key auth with no state to keep between requests, you may not need sessions at all — just check the key on each request.

Hope that helps!