node.js - 如何跨子域共享快速会话?
问题描述
我正在使用 express-session 和 MongoDbStore 来存储会话变量。但是,在使用 vhost 实现子域之后,会话变量不会在子域之间共享。我的会话配置如下
app.use(session({
secret: process.env.EXPRESS_SECRET,
cookie: {
path : '/',
domain : 'example.com',
httpOnly : false,
maxAge : 1000*60*60*24*7
},
store: store,
resave: false,
}))
示例虚拟主机代码:
app.use(vhost('login.example.com' , loginApp))
app.use(vhost('some.example.com' , someApp))
会话变量存储在 MongoDB 中,但每个子域都有不同的文档。如何使这些会话变量对我的所有子域通用?
到目前为止我已经尝试过:将域保持为'.example.com',不包括路径参数,不包括域参数,不包括httpOnly参数,使用resave为true但似乎没有任何效果提前谢谢你
解决方案
我在浏览论坛中的其他解决方案时找到了解决方案,如果有人遇到此尝试使用此快速功能:
app.use(function(req, res, next) {
// Access-Control-Allow-Origin only accepts a string, so to provide multiple allowed origins for requests,
// check incoming request origin against accepted list and set Access-Control-Allow-Origin to that value if it's found.
// Setting this value to '*' will allow requests from any domain, which is insecure.
var allowedOrigins = ['https://subdomain1.domain.com', 'https://subdomain2.domain.com' , 'https://subdomain3.domain.com'];
var acceptedOrigin = allowedOrigins.indexOf(req.headers.origin) >= 0 ? req.headers.origin : allowedOrigins[0];
res.header("Access-Control-Allow-Origin", acceptedOrigin);
next();
});
推荐阅读
- python - 网络抓取 BS4 表位于但为空 findall
- c# - 没有使用 csvHelper 映射类型的属性
- dji-sdk - 如何从 DJI H.264 视频中获取帧?
- node.js - 使用异步迭代器时避免退出 for-await 循环
- html - Anchor tag is messing with img position
- amazon-web-services - Can't create AWS ALB kubernetes ingress controller in Terraform
- javascript - Taking user input from a form, showing it on a website in an array, and replacing variety of the strings with different words
- python - Reverse url not found
- python - Odd placeholder or pre-statement on string declaration
- elasticsearch - 如何在弹性搜索中查询 IP 范围?