mirrors/etherpad-lite
1
0
Fork 0
mirror of https://github.com/ether/etherpad-lite.git synced 2025-06-21 13:40:29 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

express-session: Don't save uninitialized sessions

Browse source 
This should avoid frivolous session records, such as when the user
gets a 404 (unless login was required to see the 404).
This commit is contained in:
Richard Hansen 2021-12-18 17:51:17 -05:00
parent 7255dd7ef0
commit ec10700dff
2 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
CHANGELOG.md
View file

@ -3,6 +3,9 @@
### Notable enhancements and fixes
* Improvements to login session management:
* `express_sid` cookies and `sessionstorage:*` database records are no longer
created unless `requireAuthentication` is `true` (or a plugin causes them to
be created).
* `sessionstorage:*` database records are automatically deleted when the login
session expires (with some exceptions that will be fixed in the future).
* Requests for static content (e.g., `/robots.txt`) and special pages (e.g.,