do not initialize session if uneeded. helps express-session not create ...

[ashelley]

...sessions when using saveUninitialized: false option

passport creates an empty passport object {} on req.session every request. this causes express-session saveUninitialized: false not to work properly. this patch may have implications for downstream strategies but i've fixed up the tests on passport core to make sure the session is not defined instead of {}.

Please review this for inclusion as it solves:

#259

[coveralls]

Coverage decreased (-0.31%) to 99.69% when pulling 09ccc55 on ashelley:dont-initialize-sessions into 4dce9d9 on jaredhanson:master.

[ghost]

Sure hope this makes it into master.

[doublerebel]

👍

[bryangarza]

Looks good.

[rafaelcardoso]

Thank you @ashelley , this will solve the problem that I have.
I'm waiting the merge.

[dan-dr]

+bazillion
my poor redis

[mfmendiola]

Our mongostore is highly interested in whether this PR has landed. Any updates?

[mountHouli]

Good friends with write access, please merge this in when you can.

[rafaelcardoso]

There is anybody here? please, someone merge this ):

[wesleytodd]

I packaged up my solution to this problem, it is a hack, but it does the trick: https://github.com/wesleytodd/express-session-passport-cleanup

I will maintain this at least until this gets merged if anyone wants to use it.

[nicolashenry]

Googlebot create thousands of sessions because of the related issue. I had to filter crawlers by user agent. Please, merge this pull request.

[hnrch02]

@jaredhanson Any update on this?

[jaredhanson]

Merged. Published to npm as passport 0.3.0. Thanks!

[ashelley]

Thanks @jaredhanson