GitHub / expressjs/session issues and pull requests

#1066 - chore: fix typos

Pull Request - State: closed - Opened by noritaka1166 26 days ago

#1065 - build(deps): bump github/codeql-action from 3.28.18 to 3.29.2

Pull Request - State: open - Opened by dependabot[bot] about 1 month ago
Labels: dependencies, github_actions

#1064 - feat: update default value of resave option to false

Pull Request - State: closed - Opened by bjohansebas about 2 months ago - 1 comment
Labels: semver-major

#1063 - build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2

Pull Request - State: open - Opened by dependabot[bot] 2 months ago
Labels: dependencies, github_actions, fast track

#1062 - Calling res.end reports an error

Issue - State: closed - Opened by code-farmer-i 2 months ago - 1 comment
Labels: bug

#1061 - build(deps-dev): bump mocha from 10.2.0 to 10.8.2

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, javascript

#1060 - build(deps-dev): bump express from 4.17.3 to 4.21.2

Pull Request - State: open - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: semver-major, dependencies, javascript

#1059 - build(deps): bump cookie-signature from 1.0.7 to 1.2.2

Pull Request - State: open - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: semver-major, dependencies, javascript

#1058 - build(deps-dev): bump cookie-parser from 1.4.6 to 1.4.7

Pull Request - State: open - Opened by dependabot[bot] 3 months ago - 1 comment
Labels: dependencies, javascript

#1057 - build(deps): bump cookie from 0.7.2 to 1.0.2

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, javascript

#1056 - build(deps-dev): bump mocha from 10.2.0 to 11.3.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, javascript

#1055 - build(deps-dev): bump nyc from 15.1.0 to 17.1.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, javascript

#1054 - build(deps-dev): bump eslint from 8.56.0 to 9.27.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, javascript

#1053 - build(deps-dev): bump express from 4.17.3 to 5.1.0

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago - 2 comments
Labels: dependencies, javascript

#1052 - build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1051 - build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1050 - build(deps): bump github/codeql-action from 3.24.7 to 3.28.18

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1049 - build(deps): bump actions/checkout from 4.1.1 to 4.2.2

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1048 - build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1

Pull Request - State: closed - Opened by dependabot[bot] 3 months ago
Labels: dependencies, github_actions

#1047 - [StepSecurity] Apply security best practices

Pull Request - State: closed - Opened by step-security-bot 3 months ago - 1 comment

#1037 - Simplify `res.end()` proxy logic — current implementation adds complexity with little real-world benefit

Issue - State: open - Opened by raphendyr 3 months ago - 3 comments
Labels: enhancement, ideas, discuss

#1036 - Add option to preserve session data when calling `regenerate()`

Issue - State: open - Opened by nariakiraHara 3 months ago

#1035 - feat: add new option for custom hash

Pull Request - State: open - Opened by cesco69 4 months ago

#1034 - perf: 2x faster hash stringify

Pull Request - State: open - Opened by cesco69 4 months ago

#1031 - Request for comments / direction: Add types into repo and type checking without converting to typescript

Pull Request - State: open - Opened by raphendyr 5 months ago - 3 comments

#1030 - lint: upgrade linting environment to ECMAScript 2022

Pull Request - State: closed - Opened by raphendyr 5 months ago

#1029 - ci: add test for windows

Pull Request - State: open - Opened by bjohansebas 5 months ago - 4 comments

#1028 - undefined if req.session.isLoggedIn

Issue - State: closed - Opened by LucaschS 5 months ago - 1 comment
Labels: question

#1027 - feat: add support to dynamic cookie options

Pull Request - State: open - Opened by lincond 5 months ago - 10 comments

#1026 - feat: remove read signedCookies and cookies

Pull Request - State: closed - Opened by bjohansebas 6 months ago - 3 comments

#1025 - feat: enforce secret requirement for session creation

Pull Request - State: closed - Opened by bjohansebas 6 months ago

#1024 - Sync cert changes with v2 branch

Pull Request - State: closed - Opened by UlisesGascon 6 months ago - 3 comments

#1023 - refactor: remove safe-buffer dependency

Pull Request - State: closed - Opened by bjohansebas 6 months ago

#1022 - feat: removing http internals

Pull Request - State: closed - Opened by bjohansebas 6 months ago - 1 comment

#1021 - refactor: replace custom defer function with setImmediate

Pull Request - State: closed - Opened by bjohansebas 6 months ago

#1020 - chore: drop nodejs < 18

Pull Request - State: closed - Opened by bjohansebas 6 months ago - 10 comments

#1019 - What are the performance using a database to resolve sessions?

Issue - State: closed - Opened by Tsimopak 6 months ago - 1 comment
Labels: question

#1018 - Shouldn't express-session uses express as a peerDependency?

Issue - State: closed - Opened by samishal1998 6 months ago - 1 comment
Labels: bug

#1017 - Create a temporary session and get the cookie

Issue - State: closed - Opened by Tam 6 months ago - 2 comments
Labels: question

#1016 - Update README.md

Pull Request - State: open - Opened by gebbber 6 months ago

#1015 - feat: gencert script to regenerate the test ssl certs

Pull Request - State: closed - Opened by wesleytodd 6 months ago - 4 comments

#1014 - deps: debug@3.2.7

Pull Request - State: open - Opened by UlisesGascon 6 months ago - 2 comments
Labels: help wanted

#1013 - Please update debug dependency version

Issue - State: open - Opened by trabetti-hcl 6 months ago - 3 comments

#1012 - Express-session

Issue - State: open - Opened by khushigupta515 7 months ago - 1 comment
Labels: question

#1011 - Add express-sqlite3 session store to the list.

Pull Request - State: open - Opened by RomanBurunkov 7 months ago
Labels: docs

#1010 - Duplicate session cookie when changing configuration

Issue - State: open - Opened by AntoineAwaida 7 months ago - 1 comment
Labels: ideas

#1009 - Test certificate has expired

Issue - State: closed - Opened by targos 7 months ago - 2 comments
Labels: bug

#1008 - chore: upgrade scorecard workflow pinned action versions

Pull Request - State: closed - Opened by carpasse 7 months ago - 1 comment

#1007 - Type resolution for express ~ 4.21.2 is wrong, pulls @types/express v5 instead of v4

Issue - State: closed - Opened by m-a-rahal-os 8 months ago - 2 comments
Labels: bug

#1006 - backlog for express-session@2.x

Issue - State: open - Opened by bjohansebas 8 months ago - 9 comments
Labels: future, discuss

#1005 - ci: add CodeQL (SAST)

Pull Request - State: closed - Opened by bjohansebas 8 months ago - 1 comment

#1004 - README star counts look incorrect

Issue - State: closed - Opened by alxndrsn 8 months ago - 2 comments
Labels: docs

#1003 - fix: Resolve test failure - Refresh server.crt with existing key extending expiry to Nov 21 03:28:10 2034 GMT

Pull Request - State: closed - Opened by BaileyFirman 8 months ago - 3 comments

#1002 - Set cookie is not being passed in header when session is extended, due to which browser cookie is never extended

Issue - State: open - Opened by khushigupta515 9 months ago
Labels: bug

#1001 - refactor: remove unused `sess` parameter from `generateSessionId` fun…

Pull Request - State: open - Opened by Ayoub-Mabrouk 9 months ago

#1000 - fix(buffer): use node:buffer instead of safe-buffer

Pull Request - State: closed - Opened by ymeskini 9 months ago - 3 comments
Labels: semver-major

#999 - deps: migrate from tilde to caret

Pull Request - State: closed - Opened by dcastillogi 9 months ago - 1 comment
Labels: semver-major

#998 - Release: 1.18.1

Pull Request - State: closed - Opened by UlisesGascon 10 months ago - 1 comment

#997 - dep: cookie@0.7.2

Pull Request - State: closed - Opened by knolleary 10 months ago

#996 - Dependency on cookie version 0.6.0 triggers an npm audit failure

Issue - State: closed - Opened by hello-alf 10 months ago - 5 comments

#995 - add skipNextSave flag to skip automatic session save

Pull Request - State: open - Opened by kamalyusuf 10 months ago

#994 - docs: update var keyword to const

Pull Request - State: open - Opened by dushmanta05 11 months ago
Labels: future

#993 - Update the var keyword in README to const

Issue - State: open - Opened by dushmanta05 11 months ago
Labels: future

#992 - Feature Request - Optional flag to skip automatic session save at the end of HTTP response

Issue - State: open - Opened by kamalyusuf about 1 year ago - 1 comment

#991 - docs(README): add LibSQL compatible store

Pull Request - State: open - Opened by lbennett-stacki about 1 year ago

#990 - changed the hashing algorithm from sha1 to sha256 due to security problems

Pull Request - State: open - Opened by lucianidev about 1 year ago - 4 comments
Labels: semver-major

#989 - express-session vulnerability since it is still using a very old cookie-signature version

Issue - State: open - Opened by andiclone about 1 year ago - 1 comment

#988 - Feature request: Allow Cookie options (at least domain) based on incoming requests

Issue - State: open - Opened by robaca about 1 year ago

#986 - additional debug statements

Pull Request - State: closed - Opened by abacaphiliac about 1 year ago

#985 - Impossible to catch the cookie client side with vercel when passport redirect

Issue - State: closed - Opened by cSarcasme about 1 year ago - 1 comment
Labels: question

#984 - chore: add support for OSSF scorecard reporting

Pull Request - State: closed - Opened by inigomarquinez about 1 year ago

#983 - Set-Cookie not added in response headers when secure=true (boolean value)

Issue - State: open - Opened by domcolella about 1 year ago - 4 comments
Labels: bug

#982 - Potential solution for Cookie options(secure) in Local HTTP Environments

Pull Request - State: open - Opened by darcy521 about 1 year ago

#981 - Type 'RequestHandler<ParamsDictionary, any, any, ParsedQs, Record<string, any>>' is not assignable to type 'Type<any> | DynamicModule | Promise<DynamicModule> | ForwardReference<any>'.

Issue - State: closed - Opened by Abdulberk over 1 year ago - 1 comment

#980 - express session is failing because session is undefined

Issue - State: closed - Opened by nikitakogan1994 over 1 year ago - 4 comments
Labels: help wanted, awaiting more info

#979 - Get session object from `req.session` outside of request context

Issue - State: closed - Opened by RixInGithub over 1 year ago - 3 comments
Labels: question

#978 - docs: add connect-surreal to the list of session stores

Pull Request - State: open - Opened by knackstedt over 1 year ago

#977 - Allow `OPTIONS *` requests to pass cookie path check for default setting

Pull Request - State: open - Opened by jonchurch over 1 year ago
Labels: needs tests, needs docs

#976 - Add support for plain asterisk route

Pull Request - State: open - Opened by kasdimos over 1 year ago - 6 comments
Labels: enhancement, discuss

#975 - Any good ways to refresh database data with a session?

Issue - State: closed - Opened by TheDogHusky over 1 year ago - 4 comments
Labels: question, help wanted, good first contribution

#974 - 'sha1' hash algorithm used at index.js is unsafe

Issue - State: closed - Opened by dcamacho10 over 1 year ago - 3 comments

#973 - [MP-31523] - Added changes to duplicate the cookie without partitioned values

Pull Request - State: closed - Opened by Banupriya-Ramesh-T18435 over 1 year ago

#972 - Can't set partitioned cookie even though I updated all of the package

Issue - State: open - Opened by HoneyMeat over 1 year ago - 6 comments
Labels: question

#971 - Issue

Issue - State: closed - Opened by aragonfernando over 1 year ago - 1 comment

#970 - ci: Use GITHUB_OUTPUT envvar instead of set-output command

Pull Request - State: closed - Opened by arunsathiya over 1 year ago

#969 - Issue

Issue - State: closed - Opened by michal-ostrodicky over 1 year ago - 1 comment

#968 - Express session ignores user cookie

Issue - State: open - Opened by Leni-Vienne over 1 year ago

#967 - Cookie session not working with passportJS

Issue - State: open - Opened by EjiroOsiephri over 1 year ago - 2 comments

#966 - Add "Partitioned" option to cookies

Pull Request - State: closed - Opened by alexop1000 over 1 year ago - 4 comments
Labels: enhancement, pr, deps

#965 - Set-Cookie header sometimes not present under load

Issue - State: open - Opened by flyon over 1 year ago - 3 comments
Labels: awaiting more info

#964 - Don't `Set-Cookie` for static/public files?

Issue - State: closed - Opened by Download over 1 year ago - 2 comments

#963 - req.session added variables are not saved on mongo session store, nor on the browser

Issue - State: open - Opened by mirker21 over 1 year ago - 1 comment
Labels: question, help wanted

#962 - req.sessionStore.all with typescript bug?

Issue - State: closed - Opened by pablojsx over 1 year ago - 7 comments

#961 - [Feature Request] Support of phasing out third-party cookies

Issue - State: closed - Opened by nicob-29 almost 2 years ago - 16 comments
Labels: enhancement

#960 - README: remove rethinkDB

Pull Request - State: closed - Opened by noraj almost 2 years ago
Labels: docs, pr

#959 - Question: Use Express Session on a Backend server called by Frontend on other domain

Issue - State: open - Opened by ludovicpages almost 2 years ago - 4 comments

#958 - cookie options won't get set

Issue - State: open - Opened by m-a-h1 almost 2 years ago - 13 comments
Labels: awaiting more info

#957 - A `destroy`ed session is still `touch`ed

Issue - State: closed - Opened by luxaritas almost 2 years ago - 1 comment

#956 - Remove warning about SameSite cookie

Pull Request - State: closed - Opened by prust almost 2 years ago - 2 comments
Labels: docs, pr, awaiting more info

#955 - Express-session created on every axios request using passport and render.com

Issue - State: open - Opened by RSilva9 almost 2 years ago - 1 comment