Closed adamocarolli closed 5 years ago
Is this a problem? If this is the default behaviour of koa-session
, then I'd assume they'd intend for something creating the session to populate it. Which would put that responsibility in the territory of an AuthenticationProvider
, or any client writing custom code that involves sessions.
I wouldn't want to integrate it into Ravel's core, as that extra piece of behaviour would have unnecessary performance implications for those just using Ravel to create plain, sessionless REST APIs.
Agreed. Closed.
Session cookies are not set when session has not been accessed and populated. This is documented in koa-session's test suite: https://github.com/koajs/session/blob/master/test/cookie.test.js