Performance: Session-based authentication
MEDIUM IMPACT
This affects page load speed and interaction responsiveness by managing server-side session storage and cookie handling.
app.use(session({ secret: 'secret', resave: false, saveUninitialized: false }));
// resave: false avoids saving unchanged sessions
// saveUninitialized: false avoids saving empty sessionsapp.use(session({ secret: 'secret', resave: true, saveUninitialized: true }));
// resave: true forces session save on every request
// saveUninitialized: true saves empty sessions| Pattern | DOM Operations | Reflows | Paint Cost | Verdict |
|---|---|---|---|---|
| Session saved on every request (resave: true) | N/A | N/A | N/A | [X] Bad |
| Session saved only when changed (resave: false) | N/A | N/A | N/A | [OK] Good |