Express SessionID differs from SessionID in Cookie

Question

I have a corresponding problem by using the given example. In the example, the session is used in the WebSocket by reloading it first: ``` socket.on('set value', function (val) { sess.reload(function () { sess.value = val; sess.touch().save(); }); }); ``` Trying to use it in my own application, i get the following exception: ``` sess.reload(function () { ^ TypeError: Object #<Object> has no method 'reload' ``` I think the problem is, that no one defines the variable sess as session: ``` io.listen(app).set('authorization', function (data, accept) { if (!data.headers.cookie) return accept('No cookie transmitted.', false); data.cookie = parseCookie(data.headers.cookie); data.sessionID = data.cookie['express.sid']; store.load(data.sessionID, function (err, session) { if (err || !session) return accept('Error', false); data.session = session; return accept(null, true); }); }) ``` Maybe some has a short fix for this? Problem solved: I tried to use this example: https://github.com/DanielBaul…

Accepted Answer

Look at this piece of code from session middleware ( line 267 ):

```
var val = 's:' + signature.sign(req.sessionID, secret);
```

where `signature.sign` function is a concatenation ( pseudo-code ):

```
req.sessionID + "." + hash(secret)
```

where `hash` is a custom function ( see this for more details ).

This means that it is just a signing convention for cookies ( to make it more secure ). You can retrieve your sid by calling:

```
var signature = require( "cookie-signature" ),
    prefix = "s:";

var real_sid = sid.replace( prefix, "" );
real_sid = signature.unsign( real_sid, SESSION_SECRET );
```

Express SessionID differs from SessionID in Cookie

Solution

Problem