The same session id

Hi, why I have the same session id in cookie all time

{
  session: 'eyJpc0F1dGhvcml6ZWQiOnRydWV9',
  'session.sig': 'MQ71ACs_SuMd_6CqtSXfwd91zoE'
}

I used different browsers, delete cookies from browser, reload server. But is the same eyJpc0F1dGhvcml6ZWQiOnRydWV9 combination all time. Is ok, or I don’t understand something 😄 I thought session id must be unique all time…

The options:

{
  keys: ['mix of the drink', 'another mix of the drink :DD'],
}

The repo.

[RevealedFrom]

the entire session is in that cookie. The value ‘eyJpc0F1dGhvcml6ZWQiOnRydWV9’ is just a Base64 encoded JSON object.

Is the function to verify the cookie against session.sig exposed so that I can read session variables securely in a module (socket.io) that is not in the Express route?

[dougwilson]

Hi @ideal-life-generator this module doesn’t store session IDs at all; the entire session is in that cookie. The value 'eyJpc0F1dGhvcml6ZWQiOnRydWV9' is just a Base64 encoded JSON object. You can decode it yourself:

$ node -pe 'JSON.parse(new Buffer("eyJpc0F1dGhvcml6ZWQiOnRydWV9","base64").toString())'
{ isAuthorized: true }