express-session.js

const express = require('express')
const app = express()
const sessions = require('express-session');
const crypto = require('crypto');


if (app.get('env') === 'production') {
  session.cookie.secure = true // serve secure cookies
}


const cookieMaxAge = process.env.COOKIE_MAX_AGE || 24 * 60 * 60 * 1000; // 24 hours
const sessionSecret = process.env.SESSION_SECRET || crypto.randomBytes(32).toString("hex");
const sessionCookieName = process.env.SESSION_COOKIE_NAME || 'sid';
const session = {
  name:sessionCookieName,
  genid: (req) =>  crypto.randomUUID(),
  secret: sessionSecret,
  saveUninitialized:true,
  cookie: { 
    maxAge: cookieMaxAge,
  },
  resave: false 
}
app.use(sessions(session));