Sample code demonstrating a node-client-sessions bug (issue 14)

different-paths.js

#!/usr/bin/env node

const
express = require('express'),
app = express.createServer(),
clientSessions = require("client-sessions");

app.use(clientSessions({
    secret: 'secret',
    cookie: {
      path: '/api'
    }
  }));

app.get(
    '/', function (req, res){
        res.send('I haven\'t done anything!');
    });
 
app.get(
    '/foo', function (req, res){
        res.send('req.session.foo = ' + req.session.foo);
    });

app.get(
    '/api/foo', function (req, res){
        res.send('[API] req.session.foo = ' + req.session.foo);
    });

app.get( 
    '/api/login', function (req, res){
        req.session.foo = 'DEFINED!';
        console.log('foo has been set');
        res.redirect('/api/foo');
    });

app.get(
    '/api/logout', function (req, res) {
        req.session.reset(['csrf']);
        console.log('session has been reset');
        res.redirect('/api/foo');
    });

app.listen(8000);