mirror of
https://github.com/TryGhost/Ghost.git
synced 2024-12-22 18:31:57 +03:00
bd597db829
- This is part of the quest to separate the frontend and server & get rid of all the places where there are cross-requires - At the moment the settings cache is one big shared cache used by the frontend and server liberally - This change doesn't really solve the fundamental problems, as we still depend on events, and requires from inside frontend - However it allows us to control the misuse slightly better by getting rid of restricted requires and turning on that eslint ruleset
42 lines
1.3 KiB
JavaScript
42 lines
1.3 KiB
JavaScript
const util = require('util');
|
|
const session = require('express-session');
|
|
const constants = require('@tryghost/constants');
|
|
const config = require('../../../../shared/config');
|
|
const settingsCache = require('../../../../shared/settings-cache');
|
|
const models = require('../../../models');
|
|
const urlUtils = require('../../../../shared/url-utils');
|
|
|
|
const SessionStore = require('./store');
|
|
const sessionStore = new SessionStore(models.Session);
|
|
|
|
const expressSessionMiddleware = session({
|
|
store: sessionStore,
|
|
secret: settingsCache.get('session_secret'),
|
|
resave: false,
|
|
saveUninitialized: false,
|
|
name: 'ghost-admin-api-session',
|
|
cookie: {
|
|
maxAge: constants.SIX_MONTH_MS,
|
|
httpOnly: true,
|
|
path: urlUtils.getSubdir() + '/ghost',
|
|
sameSite: 'lax',
|
|
secure: urlUtils.isSSL(config.get('url'))
|
|
}
|
|
});
|
|
|
|
module.exports.getSession = async function getSession(req, res) {
|
|
if (req.session) {
|
|
return req.session;
|
|
}
|
|
return new Promise((resolve, reject) => {
|
|
expressSessionMiddleware(req, res, function (err) {
|
|
if (err) {
|
|
return reject(err);
|
|
}
|
|
resolve(req.session);
|
|
});
|
|
});
|
|
};
|
|
|
|
module.exports.deleteAllSessions = util.promisify(sessionStore.clear.bind(sessionStore));
|