desmondlab / nodejs-cookie-login

A simple implementation of cookie login in express

nodejs-cookie-login

For the cookie api in express:
http://expressjs.com/zh-tw/4x/api.html

Response (set up cookie in server and pass to the client):
res.cookie(name, value [, options])
res.clearCookie(name [, options])

Request ( receive cookie from client):
req.signedCookies

To use signed cookie in express, cookie-parser has to be used. Although signed cookies will still be visible in the browser, but it has a signature, so it can detect if the client modified the cookie.

rel:

1. https://stackoverflow.com/questions/11897965/what-are-signed-cookies-in-connect-expressjs
   
2. https://cythilya.github.io/2015/08/18/node-cookie-and-session/