Vanilla sessions with RoadRunner

save_cookie.php

<?php

if (session_status() !== PHP_SESSION_ACTIVE) {
    return;
}

$sessionId = session_id();
assert($sessionId !== false);
assert($sessionId !== '');

$response->headers->setCookie(Cookie::create(SessionService::SESSION_NAME, $sessionId));

session_start.php

<?php

class SessionService 
{
    public const SESSION_NAME = 'SESSIONCOOKIENAME';

    public function start(HttpRequest $request): void
    {
        if (session_status() === PHP_SESSION_ACTIVE) {
            throw new \RuntimeException('Session is already active');
        }

        $sessionId = $request->cookies->get(self::SESSION_NAME);
        if ($sessionId === null) {
            $sessionId = session_create_id();
        }

        session_id($sessionId);

        if (!session_start()) {
            throw new \RuntimeException('Failed to start the session');
        }

        // Remove the cookie that gets automatically added. We add the cookie to the Response object ourselves.
        header_remove('Set-Cookie');
    }
    
    public function save(): void
    {
        if (session_status() !== PHP_SESSION_ACTIVE) {
            return;
        }

        if (!session_write_close()) {
            throw new \RuntimeException('Failed to save session');
        }

        $_SESSION = [];
    }
}