Function sessionSettings

lib/create-app.mjs:350–370

* Returns a settings object for Express.js sessions. * * @param secureCookies {boolean} * @param host {SolidHost} * * @return {Object} `express-session` settings object

(secureCookies, host)

 * @return {Object} `express-session` settings object
 */
function sessionSettings (secureCookies, host) {
  const sessionSettings = {
    name: 'nssidp.sid',
    secret: uuid(),
    saveUninitialized: false,
    resave: false,
    rolling: true,
    cookie: {
      maxAge: 24 * 60 * 60 * 1000
    }
  }
  // Cookies should set to be secure if https is on
  if (secureCookies) {
    sessionSettings.cookie.secure = true
  }

  // Determine the cookie domain
  sessionSettings.cookie.domain = host.cookieDomain

  return sessionSettings
}

export default createApp