Releases: balor/connect-memcached
Releases · balor/connect-memcached
v2.0.0
- Changed default cipher algorithm to
aes-256-gcm
and hashing tosha512
- Incorporated
kruptein
library for crypto operations instead in-house functions - Fixed issue where passing existing memcached session ignores
secret
andalgorithm
optionr. - Added basic tests with
jest
andsupertest
Heads up before upgrade
When upgrading from pre v2 and using data encryption please flush all the session entries from memcached before rolling the update.
v1.0.0
- Replaced deprecated
cipher
functions withcipheriv
for encryption purposes. This removes the security warning about using cipheriv for counter mode ofaes-256-ctr
in case the default algorithm was used. - Cipher is created with new random initialization vector each time. This ensures proper security of session data encryption but breaks backward compatibility (see note below).
- Supported nodejs versions bumped to
>= 0.10.0
- Minor code tweaks.
Warning: Breaking changes!
If You're upgrading from the previous version of this library (v0.x.x) and use encryption for session data be sure to remove all session entries created with previous version. Upgrading library without taking appropriate action will result in SyntaxError
exceptions during JSON parsing of decoded entries.
Sessions without encryption are not affected.