What you do is the cookie parameter "expires". The browser will clear the cookie as soon as it expires and you won’t know about it - it simply won’t come with one of the future requests.
, , , cookie, - cookie ( "expires" ) - (, 2037 ).
, , cookie .
,
app.use(function(req, res, next) {
var session = JSON.parse(req.cookies['session'] || '');
if (session && new Date(session.expires) < new Date()) {
console.log('User session has expired.')
}
res.cookie('session', JSON.stringify({ session: <sessionIDKeyHere>, expires: Date.now() + 3600000 }), {
expires: new Date(2037, 0, 1),
httpOnly: true,
secure: true //Do you have https? If no, set to false
});
next();
});