deprecation issue?

I don’t know why but I can’t shake this issue and I read through any other issue pertaining to this. ie: #100 but it hasn’t helped 😢

var express, expressSession, app, aSecret, port, server;
express = require('express');
expressSession = require('express-session');
app = module.exports = express();
aSecret = process.env.cookie;
app.use(expressSession({
  secret: aSecret,
  resave: false,
  saveUninitialized: true,
  cookie: {
    path: '/',
    httpOnly: true
  }
}));
app.route('*').get(function(req, res){
  return res.send('ok');
});
if (!module.parent && (process.env.HTTP != null || process.env.PORT != null)) {
  port = (process.env.HTTP || process.env.PORT) || (yargs.argv.http || yargs.argv.port);
  console.log('Server started on port ' + port + ' at ' + new Date(Date.now()));
  server = app.listen(port);
}

what am I doing wrong? I thought this is how to pass secret to express-session?

---

I keep getting:

express-session deprecated req.secret; provide secret option app.js:6:9

[dougwilson]

It’s very likely that if you console.dir(aSecret), it’s an empty string.

[johnantoni]

Same here, thought it was deprecated but was actually an empty string.

Could always switch deprecation to:

express-session warning req.secret; please provide session secret

or

express-session warning req.secret; session secret undefined or blank ?