Merge pull request nodeSolidServer#1720 from Otto-AA/use-uuid-v4

bourgeoa · web-flow · commit ee3ff88c6f97 · 2023-02-13T17:21:06.000+01:00
Use secure uuid.v4 as session cookie secret
diff --git a/lib/create-app.js b/lib/create-app.js
@@ -302,7 +302,7 @@ function initAuthentication (app, argv) {
 function sessionSettings (secureCookies, host) {
   const sessionSettings = {
     name: 'nssidp.sid',
-    secret: uuid.v1(),
+    secret: uuid.v4(),
     saveUninitialized: false,
     resave: false,
     rolling: true,
