changed google-auth strategy and removed session use

This commit is contained in:
Sheen Capadngan
2023-05-11 00:37:02 +08:00
parent 074c0bdd77
commit addc849fa6
11 changed files with 75 additions and 238 deletions
-11
View File
@@ -3,9 +3,7 @@ dotenv.config();
import express from 'express';
import helmet from 'helmet';
import cors from 'cors';
import session from 'express-session';
import * as Sentry from '@sentry/node';
import MongoStore from 'connect-mongo';
import { DatabaseService } from './services';
import { setUpHealthEndpoint } from './services/health';
import { initSmtp } from './services/smtp';
@@ -114,15 +112,6 @@ const main = async () => {
);
app.use(requestIp.mw());
app.use(session({
secret: await getSessionSecret(),
resave: false, // don't save session if unmodified
saveUninitialized: false, // don't create session until something stored
store: MongoStore.create({
mongoUrl: mongoURL,
dbName: 'sessions',
})
}));
if ((await getNodeEnv()) === 'production') {
// enable app-wide rate-limiting + helmet security