
Company News
/Security News
Socket Selected for OpenAI's Cybersecurity Grant Program
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.
session-flash
Advanced tools
The flash is a special area of the session used for storing messages. Messages are written to the flash and cleared after being displayed to the user. The flash is typically used in combination with redirects, ensuring that the message is available to the next page that is to be rendered.
npm i session-flash
Flash messages are stored in the session. First, setup sessions as usual by
enabling cookieParser and session middleware. Then, use flash middleware
provided by session-flash.
const app = express();
const cookieParser = require('cookie-parser');
const session = require('express-session');
const flash = require('session-flash');
app.use(cookieParser());
app.use(session({
secret: 'session-secret',
resave: false,
saveUninitialized: false,
cookie: { maxAge: 60000 }
}));
app.use(flash());
With the flash middleware in place, all requests will have a req.flash() function
that can be used for flash messages.
app.get('/flash', function(req, res){
// Set a flash message by passing the key, followed by the value, to req.flash().
req.flash('info', 'Flash is back!')
res.redirect('/');
});
app.get('/', function(req, res){
// Get an array of flash messages by passing the key to req.flash()
res.render('index', { messages: req.flash('info') });
});
[The MIT License]
Copyright (c) 2012-2026
FAQs
Flash message middleware for Express sessions
We found that session-flash demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
/Security News
Socket is an initial recipient of OpenAI's Cybersecurity Grant Program, which commits $10M in API credits to defenders securing open source software.

Security News
Socket CEO Feross Aboukhadijeh joins 10 Minutes or Less, a podcast by Ali Rohde, to discuss the recent surge in open source supply chain attacks.

Research
/Security News
Campaign of 108 extensions harvests identities, steals sessions, and adds backdoors to browsers, all tied to the same C2 infrastructure.