Session Center

Small, fast minimalist session manager for node.

Installation

this module is server side only, install it by next command:

$ npm install session-center

Features

• Centralized management session
• Simple to generic or remove session
• Support TS
• Uncoupled, not require any framework

Quick start

//in js
const sessionCenter = new SessionCenter(config?)
// in ts
const sessionCenter = new SessionCenter < sessionContent?>(config?)

Config

all property are not required

property	type	default	description
name	string	sessionId	define the key of session in cookie
maxAge	number	-	duration of one session,unit with second
expires	boolean	-	set both expire date and maxAge
domain	string	-	domain or a specified URI, if not specified, it will be the web URI
secure	boolean	true	if set as true, cookie will only be transmitted over secure protocol as https
path	string	-	document location of the cookie
httpOnly	boolean	-	weather allow js get the cookie, it can help to mitigate xss attack
sameSite	boolean ¦ lax ¦ strict ¦ none	lax	limits the scope of the cookie, and true is same as strict, false will not set it, more information please refer to rfc6265
singlePoint	boolean	-	one user can only active in one client, if it specified as true, the idKey must also be specified
idKey	string	-	the union value of sessionContent's key to identify different users
secretSalt	string ¦ Buffer ¦ TypedArray ¦ DataView	random 32 bytes buffer	salt for generic cookie's hash

notice: If neither expires nor max-age specified, it will expire at the end of session.

Usage

1. sessionCenter.removeSession(req: IncomingMessage, res: ServerResponse): void;

   remove session content of current request.

2. sessionCenter.getSession(req: IncomingMessage | string, res?: ServerResponse): SessionContent | false;

   1. if typeof res === 'string': get session of current cookie, if get false, means this cookie is invalidation, you should remove it later.
   2. req and res should both be specified, it will auto remove cookie if cookie is expires

3. sessionCenter.setSession(sessionContent: SessionContent, req?: IncomingMessage, res?: ServerResponse): string;

   store session content and set cookie to response and return the cookie string. if req and res are both not specified, user should set the return cookie to response header later.

4. sessionCenter.remove(filter?: ((SessionContent: SessionContent) => boolean))

   accept a filter function, all stored session which passed filter fun will be removed, or clear all session when no filter is specified.

5. sessionCenter.find(filter: ((SessionContent: SessionContent) => boolean)):SessionContent[]

   return all session passed specified filter with an array