cookie-sessions Shouldn't readSession return an empty object {} (as the comment on the t...

Shouldn't readSession return an empty object {} (as the comment on the t...

Open pdobrev opened this issue 13 years ago • 3 comments

...op of the function says), instead of undefined if the cookie is not present?

Some middlewares that rely on the session (like everyauth) complain that it is undefined. Does this change have some security implications?

May 08 '12 19:05 pdobrev

bump?

May 11 '12 22:05 pdobrev

:+1:

Oct 26 '12 12:10 refack

:+1:

Nov 06 '12 20:11 jfromaniello