{"repo":"expressjs/cookie-session","free":true,"listed":false,"github":"https://github.com/expressjs/cookie-session","clone":"git clone https://github.com/expressjs/cookie-session.git","description":"Simple cookie-based session middleware","language":"JavaScript","stars":1149,"topics":["javascript","expressjs","nodejs","cookie","session","middleware"],"license":"MIT","category":"databases-storage","readme_excerpt":"cookie-session [![NPM Version][npm-version-image]][npm-url] [![NPM Downloads][npm-downloads-image]][npm-url] [![Build Status][ci-image]][ci-url] [![Test Coverage][coveralls-image]][coveralls-url] Simple cookie-based session middleware. A user session can be stored in two main ways with cookies: on the server or on the client. This module stores the session data on the client within a cookie, while a module like express-session stores only a session identifier on the client within a cookie and stores the session data on the server, typically in a database. The following points can help you choose which to use: cookie-session does not require any database / resources on the server side, though the total session data cannot exceed the browser's max cookie size. cookie-session can simplify certain load-balanced scenarios. cookie-session can be used to store a \"light\" session and include an identifier to look up a database-backed secondary store to reduce database lookups. NOTE This module does not encrypt the session contents in the cookie, only provides signing to prevent tampering. The client will be able to read the session data by examining the cookie's value. Secret data should not be set in req.session without encrypting it, or use a server-side session instead. NOTE This module does not prevent session replay, as the expiration set is that of the cookie only; if that is a concern of your application, you can store an expiration date in req.session object and validate it on","default_branch":null,"files":null,"tree":[],"storefront":"/r/expressjs","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/expressjs/cookie-session/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}