[x] I've read the docs

[x] I've read the docs of express-session

[x] I couldn't find the same question

Question
I am re-writing a plain Express app into a more structured NestJS app and I am having trouble dealing with sessions. Here is my setup.

main.ts

import { NestFactory } from '@nestjs/core';
import { AppModule } from './app.module';

async function bootstrap(): Promise<void> {
  const app = await NestFactory.create(AppModule);

  const port = process.env.PORT;
  await app.listen(port);
}

bootstrap().catch((err: unknown) => {
  console.error(err);
});

app.module.ts

import { Module } from '@nestjs/common';
import * as session from 'express-session';
import { SessionModule } from 'nestjs-session';
import * as sessionFileStore from 'session-file-store';

import { AppController } from './app.controller';
import { AppLoggerModule } from './app-logger/app-logger.module';
import { AuthModule } from './auth/auth.module';

const sessionTimeToLiveInSeconds = 60 * 60 * 12; //43200 seconds = 12 days
const cookieMaxAgeInMilliseconds = 1000 * 60 * 60 * 24 * 7; //604800000 ms = 1 week
const FileStore = sessionFileStore(session);

@Module({
  imports: [
    SessionModule.forRoot({
      session: {
        secret: process.env.secret,
        resave: true,
        store: new FileStore({ path: './sessions', ttl: sessionTimeToLiveInSeconds }),
        saveUninitialized: false,
        cookie: {
          secure: false,
          httpOnly: false,
          sameSite: false,
          maxAge: cookieMaxAgeInMilliseconds,
        },
      },
    }),
    AuthModule,
    AppLoggerModule,
  ],
  controllers: [AppController],
  providers: [],
})
export class AppModule {}

And when I start the NestJS server it's all good, but I make a simple GET request for something that just returns a "Hello World" string which works but I get the following error in my console 5 times

[session-file-store] will retry, error on last attempt: Error: ENOENT: no such file or directory, open 'C:\Users\<my-repo>\sessions\jm22rlgjMBLrxR0H3SUayhAlPEXI6oZY.json'

And of course no session JSON files are created either. Please help, I'm a little new at this but I feel like I'm doing everything correctly here and my system just can't write files to that folder for some reason. The sessions folder does exist, and it has the correct read/write permission on it.

Please mention other relevant information such as Node.js version and Operating System.

NestJS Version : 10.3.8
OS Version     : Windows 10.0.19045
NodeJS Version : v20.10.0
NPM Version    : 10.2.3

express-session: 1.18.0
nestjs-session : 3.0.1   

After integrating this into my Nest project we ran into these warnings. Could you resolve them please?

Fri, 18 Dec 2020 04:00:02 GMT express-session deprecated undefined resave option; provide resave option at node_modules/nestjs-session/dist/index.js:8:22

Fri, 18 Dec 2020 04:00:02 GMT express-session deprecated undefined saveUninitialized option; provide saveUninitialized option at node_modules/nestjs-session/dist/index.js:8:22

I'm not able to get the session from graphql.

req.session does not seem to work.

Because the express-session middleware is created from within the createModule closure it is not possible to access the middleware from another place.

Or is it?

I'm trying to find a good way to use session data (not for authentication) NestJS GraphQL resolvers, but not having any luck.

Any pointers/suggestions? Thanks!

I have my own middlewares and need to get session from there, from req.session, but it is undefined.

But it is available in nest controllers via @Session() session or @Req() req.session...

How to get session in middleware?

What is the current behavior?

I don't succeed to make this package work with @nestjs/graphql.
When I call a REST route, it's working well, and the session(req, res, next) middleware (from express-session) is well called.
But when I call the GraphQL entrypoint, the middleware is not called at all.

I've digged deep in nestjs source-code, but I don't know really where to look.

Even with a forRoutes: [{ path: '/*', method: RequestMethod.ALL }], this change nothing.

What is the expected behavior?

In practice, the consequences are that no cookie is defined in the GraphQL response, and so, the sessions don't work.

Please mention other relevant information such as Node.js version and Operating System.

What is the current behavior?

If using this module alongside with csurf then got an error misconfigured csrf

Please provide the steps to reproduce.

1. create new nest project.
2. add SessionModule.forRoot({ session: { secret: 'secret' } }) to app.module.ts.
3. add app.use(csurf()) to main.ts.
4. create a controller to handle request.
5. got the error misconfigured csrf.

What is the expected behavior?

Do not get this error.

Please mention other relevant information such as Node.js version and Operating System.

- Nest version: 7.2.0
- Node version: v12.16.3
- Platform: Windows

What is the current behavior?

Using @Session in a resolver dosen't work, and session is null.

Please provide the steps to reproduce.

Install Nest with graphql, and install this. Then, in your resolver have a @Session parameter and see what it is. It will be null.

What is the expected behavior?
It isn't null.

Please mention other relevant information such as Node.js version and Operating System.
Node 11.15.0, session configuration:

SessionModule.forRoot({
  session: {
    secret: 'temp',
    store: new RedisStore({ client: RedisConnection }),
    resave: false,
    saveUninitialized: true
  }
});

In my resolver:

  @Mutation(() => User)
  async register(
    @Session() session: SessionType
  ) {
    .....

    session.user = user.id; // TypeError: Cannot set property 'user' of null
  }