Session Management

##Sessions are only persisting after the user is logged in. While this is typical behavior, where is this decision made in the code? I want to modify it so that the session will be created on user visit and persist on further visits. I am using session-file-store with express-session.

I have also tried saving session objects to the request, but the session will not persist until a user is logged in.

Any help please? If someone could point me to the code where authentication causes the sessionID to persist, that would be very helpful.

Here is the session code I added:

var FileStore = require('session-file-store')(session);

app.use(session({
    name: 'server-session-cookie-id',
    secret: 'random stuff',
    store: new FileStore(),
    saveUninitialized: false,
    resave: false
}));

[roof12]

Dang, right when I am able to recreate what I thought you were experiencing you tell me it works for you. You’ve probably moved on, but I’ll add a little here in case it helps anyone else.

Only API calls will trigger the session creation. It seems that the session is created and saved to the file system correctly. However, when the API call comes from the server, the cookie never makes it to the browser. This is by correct by the design of the application.

If you want server API calls to receive the newly created cookie, you’ll have to make some changes, probably in ApiClient.

[ExDr]

Closing this. The problem seems to have been resolved by re-installed the node_modules. Thanks for the help.

@roof12 Thank you for the help on this issue.

I have no problem getting the session to save to the sessions directory. My problem is getting the session to persist without a user actually logging in.

Two points:

• When a user is logged in, the sessionID persists on further requests. This is expected behavior, the application only cares about the session for the logged in user name, like you say.
• When a user is not logged in, the sessionID does not persist (but I want it to). On further requests, a new sessionID is produced even if information is saved to the session object (why does this happen?)

In api/actions/login.js, a user is saved to the sessions object. When I duplicate this code in another API endpoint, the sessionID does not persist. Why would this be? I want the sessionID to persist on page visit, but how?