Question

I’ve got a newbie node.js question about authentication ans sessions.

I’ve made an authentication with: express.js and mongoose-auth (mongodb):

app.use(express.cookieParser());
app.use(express.session({ secret: 'esoognom'}));
app.use(auth.mongooseAuth.middleware());

I’ve got not much understanding of all that staff deeply. After users are authenticated they stay to be so unless server restarts. I want to have more persistent state of authentication, how can I manage this?

Thanks for help.

Answer 1

If you want the sessions to persist even after a server has crashes / restarted then you should use one of the following modules:

• connect-redis (in memory db, which is usually used) < sessions are stored in a Redis db
• connect-mongodb < sessions stored in MongoDB
• other session stores found here, such as couchdb or memcached: https://github.com/senchalabs/connect/wiki

You can also set the lifetime of a cookie using the maxAge param when adding the session middleware. For example if we were using connect-mongodb:

app.use(express.session({
    secret : "Stays my secret",
    maxAge : new Date(Date.now() + 3600000), //1 Hour
    store  : new MongoStore({ db: 'myDB' })
}));