express session

userSession.js

// app.js

const express = require("express");
const session = require("express-session");
const redisStore = require("connect-redis")(session);
const redis = require("redis");
const redisClient = redis.createClient();

const app = express();
const isProduction = app.get("env") === "production";

// a middleware at global level
app.use(
  session({
    name: "sametable_sid",
    secret: 'randomkeyhere', // I would make this as a env var
    resave: false,
    saveUninitialized: false,
    cookie: {
      maxAge: 7 * 86400 * 1000, // a session cookie will last for 7 days
      secure: isProduction,
      httpOnly: true,
      sameSite: "none",
    },
    store: new redisStore({
      host: "localhost",
      port: 6379,
      client: redisClient,
    }),
  })
);