login-plus 1.8.0 → 1.9.0-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/lib/login-plus.js +3 -1
  2. package/package.json +18 -18
package/lib/login-plus.js CHANGED
@@ -3,6 +3,7 @@
3
3
  var loginPlus = {};
4
4
 
5
5
  var util = require('util');
6
+ var crypto = require('crypto');
6
7
 
7
8
  var connectFlash = require('connect-flash');
8
9
  var MiniTools = require('mini-tools');
@@ -25,7 +26,7 @@ loginPlus.Manager = function LoginPlusManager(){
25
26
  'jpg','png','gif',
26
27
  'css','js','manifest'
27
28
  ];
28
- this.secret = 'keyboard cat '+Math.random();
29
+ this.secret = crypto.randomBytes(32).toString('hex');
29
30
  this.savedUser = {};
30
31
  };
31
32
 
@@ -129,6 +130,7 @@ function SetInitialOptions(app,opts){
129
130
  cookie: {
130
131
  maxAge: opts.maxAge,
131
132
  httpOnly: true,
133
+ sameSite: 'lax',
132
134
  secure:(opts.allowHttpLogin?false:true)
133
135
  }
134
136
  },sessionOpts);
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "login-plus",
3
3
  "description": "login service for express",
4
- "version": "1.8.0",
4
+ "version": "1.9.0-beta.0",
5
5
  "author": "Codenautas <codenautas@googlegroups.com>",
6
6
  "license": "MIT",
7
7
  "repository": "codenautas/login-plus",
@@ -21,35 +21,35 @@
21
21
  }
22
22
  ],
23
23
  "dependencies": {
24
+ "best-globals": "^2.0.7",
24
25
  "connect-flash": "^0.1.1",
25
- "express-session": "^1.18.2",
26
- "fs-extra": "^11.3.0",
26
+ "ensure-login": "0.1.6-beta.1",
27
+ "express-session": "^1.19.0",
28
+ "fs-extra": "^11.3.3",
29
+ "mini-tools": "^1.13.5",
27
30
  "passport": "^0.7.0",
28
31
  "passport-local": "^1.0.0",
29
- "session-file-store": "^1.5.0",
30
- "best-globals": "^2.0.1",
31
- "ensure-login": "^0.1.5",
32
- "mini-tools": "^1.13.4",
33
- "regexplicit": "^0.1.3"
32
+ "regexplicit": "^0.1.3",
33
+ "session-file-store": "^1.5.0"
34
34
  },
35
35
  "devDependencies": {
36
- "body-parser": "^2.2.0",
36
+ "ajax-best-promise": "^0.4.3",
37
+ "body-parser": "^2.2.2",
37
38
  "concat-stream": "^2.0.0",
38
39
  "cookie-parser": "^1.4.7",
39
40
  "expect.js": "^0.3.1",
40
- "express": "^5.1.0",
41
+ "express": "^5.2.1",
42
+ "mocha": "^11.7.5",
41
43
  "nyc": "^17.1.0",
42
- "pug": "^3.0.3",
43
- "mocha": "^11.7.1",
44
+ "pg-promise-strict": "^1.4.5",
44
45
  "php-session": "^0.1.0",
46
+ "pug": "^3.0.3",
45
47
  "read-yaml-promise": "^1.0.2",
46
- "sinon": "^21.0.0",
47
- "stylus": "^0.64.0",
48
- "supertest": "^7.1.4",
49
- "ajax-best-promise": "^0.4.2",
50
- "pg-promise-strict": "^1.4.3",
51
48
  "self-explain": "^0.11.0",
52
- "serve-content": "^1.0.0"
49
+ "serve-content": "^1.0.2",
50
+ "sinon": "^21.0.1",
51
+ "stylus": "^0.64.0",
52
+ "supertest": "^7.2.2"
53
53
  },
54
54
  "optionalDependencies": {
55
55
  "php-session": "^0.1.0"