Bump next-session and set cookie expiry

hoangvvo · Sep 20, 2021 · 81513af · 81513af · vercel · Sep 20, 2021
1 parent 230b2a9
commit 81513af
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 2 deletions.
diff --git a/api-lib/middlewares/session.js b/api-lib/middlewares/session.js
@@ -6,5 +6,15 @@ export default function session(req, res, next) {
     client: req.dbClient,
     stringify: false,
   });
-  return nextSession({ store: mongoStore })(req, res, next);
+  return nextSession({
+    store: mongoStore,
+    cookie: {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === 'production',
+      maxAge: 2 * 7 * 24 * 60 * 60, // 2 weeks,
+      path: '/',
+      sameSite: 'strict',
+    },
+    touchAfter: 1 * 7 * 24 * 60 * 60 * 1000, // 1 week
+  })(req, res, next);
 }
diff --git a/package.json b/package.json
@@ -29,7 +29,7 @@
     "nanoid": "^3.1.25",
     "next": "^11.1.2",
     "next-connect": "^0.10.2",
-    "next-session": "^3.4.1",
+    "next-session": "^3.4.3",
     "nodemailer": "^6.6.3",
     "passport": "^0.4.1",
     "passport-local": "^1.0.0",