Don't save sessions in db if not needed

sahat · Feb 1, 2025 · ab6e6db · ab6e6db
1 parent e42d0f5
commit ab6e6db
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/app.js b/app.js
@@ -86,8 +86,8 @@ app.use(bodyParser.json());
 app.use(bodyParser.urlencoded({ extended: true }));
 app.use(limiter);
 app.use(session({
-  resave: true,
-  saveUninitialized: true,
+  resave: true, // Only save session if modified
+  saveUninitialized: false, // Do not save sessions until we have something to store
   secret: process.env.SESSION_SECRET,
   name: 'startercookie', // change the cookie name for additional security in production
   cookie: {