Clearing session does not remove cookies

Seems like I’m experiencing a similar issue to this one: https://github.com/expressjs/cookie-session/issues/100

When setting req.session = null the cookie does not get removed.

There is actually a test that explicitly checks the cookie is still available:

https://github.com/expressjs/cookie-session/blob/master/test/test.js#L350

It seems like the cookie should get cleared when the session is. Unfortunately I cannot see a way to reliably clear the cookie in the Cookie module either.

Should it be doing something like this?

https://github.com/expressjs/cookie-session/compare/master...PaulCampbell:clear-cookies

Thanks!

[dougwilson]

Haha, no problem. I do read them all, even if I don’t have a chance to respond 👍 . I love to help out, though responses, code, or docs! I’ll get the docs improved up around how, specifically, the cookie is managed, as I think there have been a few questions around it.

[dougwilson]

This module never clears the cookie, only clears the data from the session when setting to null – the cookie will stay around to keep subsequent requests from constantly trying to reset the cookie again and ready to put more data in the session.

This module doesn’t say that setting it to null will actually clear the cookie, but to be fair, it also doesn’t describe what it does, specifically. The docs can be improved.