Configuring session cookie better

avoidwork · May 21, 2017 · 0f4fe06 · 0f4fe06
1 parent fce665d
commit 0f4fe06
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/config.json b/config.json
@@ -96,6 +96,12 @@
 		"redis": {
 			"host": "127.0.0.1",
 			"port": 6379
+		},
+		"cookie": {
+			"path": "/",
+			"httpOnly": true,
+			"secure": true,
+			"maxAge": 900000
 		}
 	},
 	"ssl": {

diff --git a/lib/utility.js b/lib/utility.js
@@ -134,6 +134,7 @@ function auth (obj, config) {
 
 	if (stateful) {
 		sesh = {
+			cookie: config.session.cookie,
 			secret: config.session.secret || uuid(),
 			saveUninitialized: true,
 			rolling: true,

diff --git a/package.json b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "tenso",
   "description": "Tensō is an elastic REST API gateway for node.js",
-  "version": "4.5.4",
+  "version": "4.5.5",
   "homepage": "http://avoidwork.github.io/tenso",
   "author": "Jason Mulligan <[email protected]>",
   "repository": {