expressjs / expressjs/session

Sessions In API's

Open
#161 37 comments 8 reactions 0 assignees View on GitHub
enhancement
Dominant language
JavaScript
Stars
6.4k
Forks
1k
PR merge metrics
No merged PRs in 30d

Description

**Note:** So I am sorry if this is a duplicate of something else, but most of the issues I found relating to this are not all that helpful.

Using the RedisStore, but this is not redis specific, I was planning on sharing my sessions between a bunch of API microservices and a web app. Obviously I don't want to use cookies for these api's, I want to use the auth header. But the same session will also be accessed from my web app, which will use cookies.

To solve this I would like to generate a single token to act as both my cookie value and my auth header. When my web app makes a request to an api it would just load the cookie value into the auth header.

At my work we have a session module that does this and it works great, but it is not open source. I was hoping to get your opinion on having this module support that. Do you like the idea? Do you know of another module that already does this? Is there a way to get this module to do that already that I am just stupidly missing? I would be happy to get this working in a PR or make a proof of concept first, just let me know.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.