Difference between secret of connect.session and connect.cookieParser?
I'd like to use secure cookies in my Express application using connect's
modules connect.session and connect.cookieParser. As per the docs, both
accept a secret parameter. This key is used to prevent the user from
tampering with the cookie.
Should I set the same key to both modules, or two different ones? Or
should I only pass a key to one of them?
No comments:
Post a Comment