webaccess: do not resave session

Before this change, the database was spammed with session values. Modern express-session has this baked in. See https://www.npmjs.com/package/express-session#resave for docs.
ether · Apr 3, 2020 · c2ea2b3 · c2ea2b3
1 parent 1f0058d
commit c2ea2b3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/node/hooks/express/webaccess.js b/src/node/hooks/express/webaccess.js
@@ -126,7 +126,7 @@ exports.expressConfigure = function (hook_name, args, cb) {
   args.app.use(sessionModule({
     secret: exports.secret,
     store: args.app.sessionStore,
-    resave: true,
+    resave: false,
     saveUninitialized: true,
     name: 'express_sid',
     proxy: true,