Express session manager.
npm install @universal-packages/express-session


Express session manager.
``shell
npm install @universal-packages/express-session
npm install express
`
#### session([options])
Initialize a Session object
`js
import { session } from '@universal-packages/express-session'
import { RedisEngine } from '@universal-packages/universal-token-registry-redis'
import express from 'express'
const engine = new RedisEngine({ host: 'localhost' })
await engine.connect()
const app = express()
app.use(session({ engine }))
`
#### Options
Session takes the same options as Token Registry
Additionally:
- cookieName String default: "session"
Name of the cookie to fetch for the session token.
- registryId String
String to use to add randomness to the token generation.
- trackSessionAccess Boolean
Update registry every time a request is made to track ip and last access changes.
#### authenticateRequest
Use this for a simple request rejection if the session was not authenticated.If not authenticated the middleware ends the response with unauthorized status.
`js
import { authenticateRequest } from '@universal-packages/express-session'
app.get('/private', authenticateRequest, async (request, response) => {
response.end()
})
`
Authenticating request is very simple you can even add your own logic like setting a current user to use later.
`js
export async function authenticateRequest(request, response, next) {
if (request.session.authenticated) {
request.currentUser = await User.find(request.session.userId)
next()
} else {
response.status(401).end()
}
}
`
You can either set the header Authorization in the format bearer or configure express to parse cookies and set a session cookie with the token value, more about how to get a token below.
When the middleware is in use a Session object will be available in the request object.
`js
app.get('/', async (request, response) => {
const currentUser = await User.find(request.session.userID)
response.end()
})
`
#### authenticated Boolean
True whe a request was authenticated with a token.
#### id String
A unique id for the session aside from the token.
#### userId String
The same id used to create the session at log in.
#### token String
The token that came with the request.
#### firstAccessed Date
Date in which the session was created at log in.
#### lastAccessed Date
Date of the current moment using the session token.
#### firstIp String
Request ip when the session was created at log in.
#### lastIp String
Request ip of the current moment using the session token.
#### userAgent String
User agent in which the session was created at log in.
#### logIn(userID: String) Async
Creates a new session using the user id and sets the cookie session as well as the Authorization response header to return to the user when ending the response.
#### logOut(token? string) Async
Disposes the current session from the registry so the token is no longer valid, or if a token is provided it will dispose that session instead.
#### activeSessions() Async
Returns all the active sessions for the current session user.
#### activeSessions(userId: String, [options: Object]) Async
Returns all the active sessions for the user id.
- userId Stringoptions
The id of the user to get the active sessions from.
- Object
Same options as Token Registry
#### injectSession(request: Request, response: Response, options?: ExpressSessionOptions)
To only inject the session object into the request and don't behave as middle ware use this method. In case you are doing some custom middleware.
`js
import { injectSession } from '@universal-packages/express-session'
import express from 'express'
const app = express()
app.use(async (request, response, next) => {
await injectSession(request, response, options)
next()
})
`
In order for typescript to see the global types you need to reference the types somewhere in your project, normally ./src/globals.d.ts.
`ts``
///
This library is developed in TypeScript and shipped fully typed.
The development of this library happens in the open on GitHub, and we are grateful to the community for contributing bugfixes and improvements. Read below to learn how you can take part in improving this library.
- Code of Conduct
- Contributing Guide