Node Connect Pg Simple Versions Save

A simple, minimal PostgreSQL session store for Express

6 months ago

9.0.1 (2023-11-01)

11 months ago

Breaking change: Require Node version >=16.0.0
Notable: Start automatic pruning lazily. Wait for first use of the session manager before scheduling the pruning. #285
Change: Log whole error object instead of only message. Thanks @safareli! #225
...and internal updates to dev dependencies etc

1 year ago

BREAKING: Require Node version ^14.18.0 || >=16.0.0 ec7aa41 390aecb
Notable: Mark most private methods and properties as actually private using the Private class feature (having the name begin with a #) This can be breaking if you relied on those properties or methods 75bf29b 96493b6
Internal: Update included version of pg 43c015d
Internal: Use node: to import built in modules 4ebc956
...and a lot of updates to dev dependencies, GitHub Action workflows etc

2 years ago

Breaking change: Now requires at least Node.js 12.x
Possibly breaking change: Align session expiration logic with connect-redis which in turned aligned with connect-mongo. Fixes #54.
Minor breaking change: The .close() method is now async and returns a Promise that will be resolved when this session store is fully shut down. Fixes #183.
Feature: New option: disableTouch. Disables updating of TTL in database on touch. Fixes #55.
Feature: New option: createTableIfMissing. When set, the session table will be automatically created if missing. Fixes #158 and #173. Thanks @aadeshmisra!
Tweak: Slightly tweaked the pg-promise integration. Fixes #153.
Tweak: Introduced a new internal _asyncQuery() function in a move to modernize internal code on top of Promise / async / await.

3 years ago

Possibly breaking change: Align session expiration logic with connect-redis which in turned aligned with connect-mongo. Fixes #54.
Minor breaking change: The .close() method is now async and returns a Promise that will be resolved when this session store is fully shut down. Fixes #183.
Minor breaking change: Now requires Node version ^10.17.0 || >=11.14.0
Feature: New option: disableTouch. Disables updating of TTL in database on touch. Fixes #55.
Feature: New option: createTableIfMissing. When set, the session table will be automatically created if missing. Fixes #158 and #173. Thanks @aadeshmisra!
Tweak: Slightly tweaked the pg-promise integration. Fixes #153.
Tweak: Introduced a new internal _asyncQuery() function in a move to modernize internal code on top of Promise / async / await.

3 years ago

Fix: Regression, query errors wasn't properly forwarded. Fixes #180 and #179. Thanks @alxndrsn! (5c324ac)
Test: Added test for above regression (fd36978)
Change: Improved types + error return values (f73ea0d 68a2242)
Change: Updated SECURITY.md to delegate security reports to Tidelift, and thus ensure quicker responses (7683d40 59c7fbc)

3 years ago

4 years ago

Feature: Prune intervals are now by default randomized between 50% and 150% of the set prune value, making the average prune interval be the same as before, but makes database load more even by making it unlikely for eg. many instances to all prune at once.
Feature: New option pruneSessionRandomizedInterval enables deactivation + customization of the new random prune interval feature.
Change: Default prune interval is now 5 minutes, rather than 1 minute. No need to clean extremely often. Will probably make even longer eventually, but a more drastic change could be kind of a breaking change. Please comment in #162 with feedback on future default.
Performance: The database schema definition now specifies an index on the expire column. You have to add this yourself if you have already set up this module. The change is purely for enhancing performance and can be skipped if no performance issues have been experiences. It is recommended to apply it though.

4 years ago

Very minor security fix: schemaName and tableName wasn't escaped. If any of the two contained a string with a double quote in it, then that would enable an SQL injection. This was previously a feature of tableName, before the introduction of a separate schemaName, as that allowed a schema to be defined as part of tableName. Defining schema name through tableName is still supported after this fix, but is now deprecated.
Fix: Errors wasn't propagated properly. Fixed in #150. Thanks @bobnil!

4 years ago

Breaking change: Now requires at least Node.js 10.x, this as Node.js 8.x only have a short time left in its LTS
Breaking change: This project now uses INSERT ... ON CONFLICT, more popularly known as UPSERT. This is only supported on PostgreSQL version 9.5 and above.
Update pg-promise dev dependency to 9.x
Listen on pool errors. Fixes #29
Lots of dev dependency updates