-
Notifications
You must be signed in to change notification settings - Fork 59
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
How to invalidate a session? #98
Comments
Hi @kfir124
Using yar with redis is very common. Just setup redis as your hapi caching layer (https://github.com/hapijs/catbox-redis) and you're all good. Yar will do the rest. The session id is kept in the cookie, and the cookie is always encrypted. |
This thread has been automatically locked due to inactivity. Please open a new issue for related bugs or questions following the new issue template instructions. |
Hi nice project but there are some things I do not fully understand
I'm thinking to use yar as a pure session implementation with Redis as the session backend cache.
(by the way if I use yar as a pure session, does it store the sesssion ID in the cookie? and does it sign the session ID?)
Thanks in advance
EDIT: Pure session = maxCookieSize: 0
The text was updated successfully, but these errors were encountered: