Prevention of the Use of Insecure Session IDs

session.ts

import express from 'express';
import session from 'express-session';
import crypto from 'crypto';

const app = express();

app.use(session({
  secret: 'your-secret-key',
  resave: false,
  saveUninitialized: true,
  cookie: { secure: true, httpOnly: true },
  genid: (req) => {
    return crypto.randomBytes(16).toString('hex'); // returns a 32-character hexadecimal string
  }
}));