v12.0.0 - initial commit

packages/server/lib/new-admin/middlewares/session.js

@@ -0,0 +1,29 @@
+const express = require('express')
+const router = express.Router()
+const session = require('express-session')
+const PgSession = require('connect-pg-simple')(session)
+const db = require('../../db')
+const { USER_SESSIONS_TABLE_NAME } = require('../../constants')
+const { getOperatorId } = require('../../operator')
+
+router.use('*', async (req, res, next) =>
+  getOperatorId('authentication').then(operatorId =>
+    session({
+      store: new PgSession({
+        pgPromise: db,
+        tableName: USER_SESSIONS_TABLE_NAME,
+      }),
+      name: 'lamassu_sid',
+      secret: operatorId,
+      resave: false,
+      saveUninitialized: false,
+      cookie: {
+        httpOnly: true,
+        secure: true,
+        sameSite: true,
+      },
+    })(req, res, next),
+  ),
+)
+
+module.exports = router