diff --git a/examples/auth/index.js b/examples/auth/index.js index 40b73e6de16..930026adbb9 100644 --- a/examples/auth/index.js +++ b/examples/auth/index.js @@ -22,7 +22,15 @@ app.use(express.urlencoded()) app.use(session({ resave: false, // don't save session if unmodified saveUninitialized: false, // don't create session until something stored - secret: 'shhhh, very secret' + secret: 'shhhh, very secret', + cookie: function (req) { + return { + httpOnly: true, + secure: req.secure || false, + sameSite: 'auto', + maxAge: 24 * 60 * 60 * 1000 // 24 hours + } + } })); // Session-persisted message middleware diff --git a/examples/mvc/index.js b/examples/mvc/index.js index 1d8aa0e3c31..5a35e54e4f9 100644 --- a/examples/mvc/index.js +++ b/examples/mvc/index.js @@ -40,7 +40,15 @@ app.use(express.static(path.join(__dirname, 'public'))); app.use(session({ resave: false, // don't save session if unmodified saveUninitialized: false, // don't create session until something stored - secret: 'some secret here' + secret: 'some secret here', + cookie: function (req) { + return { + httpOnly: true, + secure: req.secure || false, + sameSite: 'auto', + maxAge: 24 * 60 * 60 * 1000 // 24 hours + } + } })); // parse request bodies (req.body) diff --git a/examples/session/index.js b/examples/session/index.js index 2bb2b109c82..559fa1a349e 100644 --- a/examples/session/index.js +++ b/examples/session/index.js @@ -16,7 +16,15 @@ var app = express(); app.use(session({ resave: false, // don't save session if unmodified saveUninitialized: false, // don't create session until something stored - secret: 'keyboard cat' + secret: 'keyboard cat', + cookie: function (req) { + return { + httpOnly: true, + secure: req.secure || false, + sameSite: 'auto', + maxAge: 24 * 60 * 60 * 1000 // 24 hours + } + } })); app.get('/', function(req, res){ diff --git a/examples/session/redis.js b/examples/session/redis.js index bbbdc7fd3e5..d4bd44c3a69 100644 --- a/examples/session/redis.js +++ b/examples/session/redis.js @@ -21,7 +21,15 @@ app.use(session({ resave: false, // don't save session if unmodified saveUninitialized: false, // don't create session until something stored secret: 'keyboard cat', - store: new RedisStore + store: new RedisStore, + cookie: function (req) { + return { + httpOnly: true, + secure: req.secure || false, + sameSite: 'auto', + maxAge: 24 * 60 * 60 * 1000 // 24 hours + } + } })); app.get('/', function(req, res){ diff --git a/package.json b/package.json index 8c9efb5609d..eeb092b580f 100644 --- a/package.json +++ b/package.json @@ -68,7 +68,7 @@ "cookie-session": "2.1.1", "ejs": "^3.1.10", "eslint": "8.47.0", - "express-session": "^1.18.1", + "express-session": "^1.19.0", "hbs": "4.2.0", "marked": "^15.0.3", "method-override": "3.0.0",