evanpipta / logophile

A word game inspired by boggle. Written in Node and playable in a web browser.
http://logophile.online/
GNU General Public License v2.0
2 stars 0 forks source link

Secure random session cookies #1

Open evanpipta opened 8 years ago

evanpipta commented 8 years ago

Session cookies should use a longer, secure random token

This is one method but it's async, do I really want that? Not sure: https://nodejs.org/api/crypto.html#crypto_crypto_randombytes_size_callback

There's also a secure-random package on npm which is synchronous: https://www.npmjs.com/package/secure-random