Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
rest-sessions
Advanced tools
A REST interface to handle and share sessions between different app server platforms. Based on redis-sessions.
npm install rest-sessions
Run npm install
to install the dependencies.
For the test make sure Redis runs locally and run npm test
Create a session for :app and user :id
Parameters:
ip
The IP of the userttl
optional (default: 7200) The timeout for the session in secondsExample:
POST /mywebapp/create/user123?ip=192.168.99.22&ttl=86400
Response:
{"token": "KrxwdpUjoTQcYmMISjQE2C4drmXMhn5w2gX0388UySdPYoEJkPa74nhZhg3iaj7w"}
Note: You should save this token in a cookie and use it in subsequent requests to identify the user via GET /:app/get/:token
Get a session for :app and :token
Example:
GET /mywebapp/get/KrxwdpUjoTQcYmMISjQE2C4drmXMhn5w2gX0388UySdPYoEJkPa74nhZhg3iaj7w
Response:
{
"id": "user123",
"r": 1, // The read counter for this session
"w": 1, // The write counter for this session
"ttl": 86400,
"idle": 273, // The idle time since the previous request
"ip": "192.168.99.22"
}
Set some additional parameters for this session via a simple JSON object supplied via the POST body.
Example 1:
POST /mywebapp/set/KrxwdpUjoTQcYmMISjQE2C4drmXMhn5w2gX0388UySdPYoEJkPa74nhZhg3iaj7w
Content-Type: application/json
{
"name": "Peter Smith",
"unread_msgs": 12
}
Response:
{
"id": "user123",
"r": 1,
"w": 2,
"ttl": 86400,
"idle": 211,
"ip": "192.168.99.22",
"d": {
"name": "Peter Smith",
"unread_msgs": 12,
"age": 46
}
}
Example 2:
null
POST /mywebapp/set/KrxwdpUjoTQcYmMISjQE2C4drmXMhn5w2gX0388UySdPYoEJkPa74nhZhg3iaj7w
Content-Type: application/json
{
"name": "Bruce Dickinson",
"unread_msgs": null,
"job": "making gold records"
}
Response:
Note that the unread_msgs
field was removed and age
was not touched.
{
"id": "user123",
"r": 1,
"w": 3,
"ttl": 86400,
"idle": 17,
"ip": "192.168.99.22",
"d": {
"name": "Bruce Dickinson",
"age": 46,
"job": "making gold records"
}
}
Get the number of active unique users (not sessions!) within the last n seconds
Parameters:
dt
Delta time. Amount of seconds to check (e.g. 600 for the last 10 min.)Get a session for :app and :token
Example:
GET /mywebapp/activity?dt=600
Response:
{"activity": 1}
Kill a single session of an app.
Example:
DELETE /mywebapp/kill/KrxwdpUjoTQcYmMISjQE2C4drmXMhn5w2gX0388UySdPYoEJkPa74nhZhg3iaj7w
Response:
{"kill": 1}
A single unique user id might have multiple sessions on different devices and/or browsers. This methods kills all sessions of an id.
Example:
DELETE /mywebapp/killsoid/user123
Response:
{"kill": 3}
Kills all sessions of an app.
Example:
DELETE /mywebapp/killall
Response:
{"kill": 42}
FAQs
A REST interface for redis-sessions
The npm package rest-sessions receives a total of 3 weekly downloads. As such, rest-sessions popularity was classified as not popular.
We found that rest-sessions demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.