鍍金池/ 問答/Python  Linux  HTML/ koa-session中app.keys什么意思?

koa-session中app.keys什么意思?

const session = require('koa-session');
const Koa = require('koa');
const app = new Koa();
app.keys = ['some secret hurr'];

const CONFIG = {
  key: 'koa:sess', /** (string) cookie key (default is koa:sess) */
  /** (number || 'session') maxAge in ms (default is 1 days) */
  /** 'session' will result in a cookie that expires when session/browser is closed */
  /** Warning: If a session cookie is stolen, this cookie will never expire */
  maxAge: 86400000,
  overwrite: true, /** (boolean) can overwrite or not (default true) */
  httpOnly: true, /** (boolean) httpOnly or not (default true) */
  signed: true, /** (boolean) signed or not (default true) */
  rolling: false, /** (boolean) Force a session identifier cookie to be set on every response. The expiration is reset to the original maxAge, resetting the expiration countdown. (default is false) */
  renew: false, /** (boolean) renew session when session is nearly expired, so we can always keep user logged in. (default is false)*/
};
app.use(session(CONFIG, app));

app.use(ctx => {
  // ignore favicon
  if (ctx.path === '/favicon.ico') return;

  let n = ctx.session.views || 0;
  ctx.session.views = ++n;
  ctx.body = n + ' views';
});

app.listen(3000);

如上代碼,是koa-session官網(wǎng)文檔代碼,我特別想知道app.keys = ['some secret hurr']; 設(shè)置的是什么呢?里面內(nèi)容可以隨意寫嗎?

回答
編輯回答
尐飯團(tuán)

內(nèi)容可以隨便填,一般是隨機(jī)字符串。作用是用來加密cookie

2018年1月21日 23:58
編輯回答
蟲児飛

就是用來加密字符串,隨便填。

2017年3月9日 02:13