Skip to content

7.0.0

Compare
Choose a tag to compare
@Ocramius Ocramius released this 10 Apr 10:45
7.0.0
c22a5d2

Build Status

This release renames the default session cookie to add a __Secure- prefix, which, in compliant user agents, means that the cookie will be rejected when used in insecure contexts (such as HTTPS to HTTP downgrade).

This change is a major BC break, since upgrading the library will now lead to active sessions being dropped when deploying an application with this new version.

References:

Total issues resolved: 3