jschan - Anonymous imageboard software. Classic look, modern features and feel. Works without JavaScript and supports Tor, I2P, Lokinet, etc.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 

30 lines
866 B

'use strict';
const session = require('express-session')
, redisStore = require('connect-redis')(session)
, { cookieSecret, secureCookies } = require(__dirname+'/../configs/main.js')
, { redisClient } = require(__dirname+'/../redis.js')
, production = process.env.NODE_ENV === 'production'
, { DAY } = require(__dirname+'/timeutils.js')
, sessionMiddlewareCache = {};
module.exports = (req, res, next) => {
const proto = req.headers['x-forwarded-proto'];
return sessionMiddlewareCache[proto] || (sessionMiddlewareCache[proto] = session({
secret: cookieSecret,
store: new redisStore({
client: redisClient,
}),
resave: false,
saveUninitialized: false,
rolling: true,
cookie: {
httpOnly: true,
secure: secureCookies && production && (proto === 'https'),
sameSite: 'strict',
maxAge: DAY,
}
})(req, res, next));
}