Express creating new session for each request

Express-session is creating a new session (new sessionID) for new request. And it happens intermittently, for example sometimes for first 3-4 hits it will work fine and keep using same existing session and on 4th hit it will create a new one, Sometimes it will create new session on first request itself.

Things that i have already tried and are not working…

Express session is created after static file routes. Express session secret and cookieParser secret are set to same. Using app.use(favicon(path.join(__dirname, ‘public’, ‘favicon.ico’))); for favicon. Setting very high value for max-age field while creating cookie. Below is my app.js snippet -

var passport = require('passport');
var expressSession = require('express-session');
var app = express();
app.engine('hbs', hbs.express4({
  partialsDir: __dirname + '/views/partials'
}));
app.set('view engine', 'hbs');
app.set('views', path.join(__dirname, 'views'));
app.use(favicon(path.join(__dirname, 'public', 'favicon.ico')));
app.use(logger('dev'));
app.use(bodyParser.json());
app.use(bodyParser.urlencoded({ extended: false }));

app.use(express.static(path.join(__dirname, 'public')));
var flash = require('connect-flash');
app.use(flash());

var initPassport = require('./passport/init');
initPassport(passport);
//app.use(bodyParser.urlencoded());
app.use(cookieParser('mysecret'));
app.use(expressSession({ secret: 'mysecret', name:'user', cookie: {maxAge: 60000000}}));
app.use(passport.initialize());
app.use(passport.session());

[GeniaT]

For those googling around for this same issue, I fixed mine by setting the flag saveUninitialized: false in the session middleware.

[PaulBGD]

I’ve encountered a similar problem, except it was because I wasn’t including cookies when using the browser fetch.