Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make sessions more robust #20

Open
seanchen1991 opened this issue Sep 10, 2014 · 8 comments
Open

Make sessions more robust #20

seanchen1991 opened this issue Sep 10, 2014 · 8 comments

Comments

@seanchen1991
Copy link

No description provided.

@seanchen1991
Copy link
Author

If a user has logged in, they do not need to log in again upon page refresh. However, their name is not displayed in the welcome message in the top right corner. Not sure if sessions ever timeout or just remain indefinitely.

@sputh
Copy link
Member

sputh commented Sep 10, 2014

you can set the session timeout time somewhat like this:
app.use(session({secret: '123Secret', cookie: {maxAge: 60000}})); where age is in ms

@sputh
Copy link
Member

sputh commented Sep 10, 2014

will be handled on the server side. Will be using tokens instead of sessions because angularjs likes tokens and it allows for mobile integration

@sputh sputh assigned sputh and unassigned seanchen1991 Sep 10, 2014
@sputh
Copy link
Member

sputh commented Sep 10, 2014

We are now considering adding any event in the cart to our purchase history database with a new column "open/close or purchase status". If an item gets "checkout" then, it will close, otherwise, it will remain open

@sputh
Copy link
Member

sputh commented Sep 11, 2014

Add zip code to token, working on storing token into a cookie so that whenever user info is being called on the client side, it will refer to the cookie rather than the token

@sputh
Copy link
Member

sputh commented Sep 11, 2014

will be using localStorage instead of cookies as it is just as persistent, more secure and better supported across different platforms

@sputh
Copy link
Member

sputh commented Sep 11, 2014

Adding feature: default username is set to "Guest" and username is stored as $localStorage

@sputh
Copy link
Member

sputh commented Sep 12, 2014

Need to change userLogin to POST request rather than GET requests

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants