Set secret in cookie-parser or express-session?

If you are using cookie-parser, and express-sessionwith Express 4 I put the "secret" to the cookie parser or express session. Are there any recommendations that are here?

It seems that if I put the secret in cookie-parser, the coockie will fall in req.signedCookies... and if I put the secret in express-session, then coquetry will end in req.cookies.

+4
source share

Source: https://habr.com/ru/post/1543880/


All Articles