Skip to content

Releases: balor/connect-memcached

v2.0.0

18 Aug 22:22
Compare
Choose a tag to compare
  • Changed default cipher algorithm to aes-256-gcm and hashing to sha512
  • Incorporated kruptein library for crypto operations instead in-house functions
  • Fixed issue where passing existing memcached session ignores secret and algorithm optionr.
  • Added basic tests with jest and supertest

Heads up before upgrade
When upgrading from pre v2 and using data encryption please flush all the session entries from memcached before rolling the update.

v1.0.0

01 Jul 10:48
Compare
Choose a tag to compare
  • Replaced deprecated cipher functions with cipheriv for encryption purposes. This removes the security warning about using cipheriv for counter mode of aes-256-ctr in case the default algorithm was used.
  • Cipher is created with new random initialization vector each time. This ensures proper security of session data encryption but breaks backward compatibility (see note below).
  • Supported nodejs versions bumped to >= 0.10.0
  • Minor code tweaks.

Warning: Breaking changes!

If You're upgrading from the previous version of this library (v0.x.x) and use encryption for session data be sure to remove all session entries created with previous version. Upgrading library without taking appropriate action will result in SyntaxError exceptions during JSON parsing of decoded entries.

Sessions without encryption are not affected.

v0.2.0

17 Mar 10:26
Compare
Choose a tag to compare
  • Added transparent encryption support
  • Added functionality to support a default TTL without having a maxAge
  • Support recommended store.touch method
  • Bumped up required version of memcached client
  • Fixes, typos, style touches