'use strict'; //////////////////////////////////////////////////////////////////////////////// /// DISCLAIMER /// /// Copyright 2015 ArangoDB GmbH, Cologne, Germany /// /// Licensed under the Apache License, Version 2.0 (the "License"); /// you may not use this file except in compliance with the License. /// You may obtain a copy of the License at /// /// http://www.apache.org/licenses/LICENSE-2.0 /// /// Unless required by applicable law or agreed to in writing, software /// distributed under the License is distributed on an "AS IS" BASIS, /// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. /// See the License for the specific language governing permissions and /// limitations under the License. /// /// Copyright holder is ArangoDB GmbH, Cologne, Germany /// /// @author Alan Plum //////////////////////////////////////////////////////////////////////////////// const assert = require('assert'); module.exports = function cookieTransport(cfg) { if (!cfg) { cfg = {}; } else if (typeof cfg === 'string') { cfg = {name: cfg}; } assert(!cfg.ttl || typeof cfg.ttl === 'number', 'TTL must be a number or not set'); assert(!cfg.algorithm || cfg.secret, 'Must specify a secret when specifying an algorithm'); const name = cfg.name || 'sid'; const ttl = cfg.ttl || undefined; const opts = cfg.secret ? { secret: cfg.secret, algorithm: cfg.algorithm } : undefined; return { get(req) { return req.cookie(name, opts); }, set(res, value) { res.cookie(name, value, Object.assign({}, opts, {ttl})); }, clear(res) { res.cookie(name, '', Object.assign({}, opts, {ttl: -1 * 60 * 60 * 24})); } }; };