Explanation of configuration for create cookies in express

cookie-options.json

// defaults are { path: '/', httpOnly: true, maxAge: null }, maxAge: null mean the cookie is deleted when that user closes the browser

{
  domain: '.domain.tld',    // to allow subdomains access to the same cookie, for instance
  path: '/blog', // to restrict the cookie to a path
  httpOnly: false, // if you need access to this cookie from javascript on the client, set to false this option
  expires: new Date(Date.now() + 24 * 60 * 60 * 1000),  // expire in 1 day instead of 1 year (this option tells the exact date of expire)
  maxAge: 900000, // expire in 900000 miliseconds from now (this options tells the date of expire relative to the current time in milliseconds )
  secure: true // for serving over https
  signed: true // for create signed cookies with a secret to prevent tampering, this option uses the secrete passed in express.cookieParser(secret)
}


/*
"session": significa que la cookie solo esta viva por la sesion del navegador
*/