jschan - Anonymous imageboard software. Classic look, modern features and feel. Works without JavaScript and supports Tor, I2P, Lokinet, etc.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 

33 lines
986 B

'use strict';
const session = require('express-session')
, redisStore = require('connect-redis')(session)
, { cookieSecret } = require(__dirname+'/../configs/secrets.js')
, config = require(__dirname+'/../config.js')
, { redisClient } = require(__dirname+'/../redis.js')
, production = process.env.NODE_ENV === 'production'
, { DAY } = require(__dirname+'/timeutils.js')
, sessionMiddlewareCache = {};
module.exports = (req, res, next) => {
const { secureCookies } = config.get;
const proto = req.headers['x-forwarded-proto'];
const sessionMiddleware = sessionMiddlewareCache[proto] || (sessionMiddlewareCache[proto] = session({
secret: cookieSecret,
store: new redisStore({
client: redisClient,
}),
resave: false,
saveUninitialized: false,
rolling: true,
cookie: {
httpOnly: true,
secure: secureCookies && production && (proto === 'https'),
sameSite: 'strict',
maxAge: DAY,
}
}));
return sessionMiddleware(req, res, next);
}