* fix(express): updating express session name variable due to depreca…

…tion * fix(express): updating express session name variable from key (the old deprecated one) to the new variable: name * fix(express): re-wording confusing comment on the session cookie name
taobataoma · Jul 27, 2016 · 37183e0 · 37183e0
1 parent 89075cb
commit 37183e0
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 3 deletions.
diff --git a/config/env/default.js b/config/env/default.js
@@ -24,8 +24,7 @@ module.exports = {
   },
   // sessionSecret should be changed for security measures and concerns
   sessionSecret: process.env.SESSION_SECRET || 'MEAN',
-  // sessionKey is set to the generic sessionId key used by PHP applications
-  // for obsecurity reasons
+  // sessionKey is the cookie session name
   sessionKey: 'sessionId',
   sessionCollection: 'sessions',
   // Lusca config

diff --git a/config/lib/express.js b/config/lib/express.js
@@ -120,7 +120,7 @@ module.exports.initSession = function (app, db) {
       httpOnly: config.sessionCookie.httpOnly,
       secure: config.sessionCookie.secure && config.secure.ssl
     },
-    key: config.sessionKey,
+    name: config.sessionKey,
     store: new MongoStore({
       mongooseConnection: db.connection,
       collection: config.sessionCollection