express-session does not work and req.session returns undefined

Question

Hello. As I was developing on my computer, it was working fine. But, when I transferred the files to my droplet, the express-session broke and it returns undefined. I have no code sample because every combination I did has not worked. The issue might be with the droplet (running Linux Ubuntu)

Bobby · Accepted Answer

Hi there, There could be several reasons why req.session is returning undefined. Let’s go through some common troubleshooting steps that might help resolve this issue: 1. Check Node.js Versions Ensure that the Node.js version on your DigitalOcean Droplet is the same as or compatible with the version you used on your local machine. Incompatible or outdated Node.js versions can cause unexpected behavior. 2. Verify express-session Configuration Make sure that express-session is properly configured. A typical setup looks like this: const session = require('express-session'); app.use(session({ secret: 'your-secret-key', resave: false, saveUninitialized: true, cookie: { secure: false } // Set to true if you are using HTTPS })); Secret : This should be a random string to encrypt the session ID cookie. Resave and SaveUninitialized : These should usually be set to false and true respectively. Cookie Secure : If your Droplet is using HTTPS, set cookie.secure to true. Make sure that express-session is initialized before any middleware that requires sessions. The order of middleware in Express is important. 3. Check for Any Proxy Issues If your Droplet is behind a reverse proxy (like Nginx), you need to set trust proxy in Express: app.set('trust proxy', 1); // Trust first proxy This is important for secure cookies and when using HTTPS: https://expressjs.com/en/guide/behind-proxies.html Besides all that, if you are still seeing the issue, are there any errors in the logs of your Node.js application or warnings? Sometimes the issue might be logged, providing clues for resolution. What you could also try is to set up a minimal Express app with express-session on the Droplet to see if the issue persists. This can help you determine if the problem is with your app’s code or the environment. Also one more thing that you might want to check is, if you’re using environment variables, ensure they are correctly set up on your Droplet. Missing or incorrect environment variables can lead to such issues. Let me know how it goes! Best, Bobby

KFSys · Answer

Heya @piootra , There could be a couple of issues here, let’s try and go through them and see if they would help: Check Node.js Versions : Ensure that the Node.js version on your droplet is the same as or compatible with the version you used on your local machine. Differences in Node.js versions can sometimes lead to unexpected behavior. Environment Variables : If your application uses environment variables (e.g., for setting session secrets or configuration settings), ensure they are correctly set on your droplet. These variables might not be automatically transferred with your files. Install Dependencies : Make sure all dependencies, including express-session, are correctly installed on the droplet. Run npm install in your project directory to ensure all necessary packages are installed. Session Store : If you’re using a session store (like Redis, MongoDB, etc.), ensure that it’s correctly configured and accessible from your droplet. Network configurations or firewall settings could prevent your application from accessing the session store. Cross-Origin Requests : If your front-end and back-end are hosted separately, ensure that your CORS (Cross-Origin Resource Sharing) settings are correctly configured to allow requests from your front-end. Logging and Debugging : Add more logging around your session handling code to get more insights into what might be going wrong. Check the logs for any errors or warnings that might indicate the source of the problem. File Permissions : Ensure that the user running the Node.js process on your droplet has the correct permissions to access all the files and directories used by your application. Web Server Configuration : If you’re using a web server like Nginx or Apache as a reverse proxy, ensure it’s correctly configured to handle sessions. Some proxy settings can interfere with session handling.

saradha · Answer

Hello there,I spent days on a similar error, I was using passport and it just did not work. I reached out to few communities as well, could not get it to work, hence not sure about the root cause.later when I used cookies , i was not able to set it due to public suffix listing. This might have been an issue for session as well.Not sure if this is relevant here , dropping it anyway. Hope you find it!

Become a contributor for community

DigitalOcean Documentation

Resources for startups and AI-native businesses

The developer cloud

Start building today

Report this

express-session does not work and req.session returns undefined

Related questions

How do I display an image file that is outside the roda root folder?

Why is TikTok unable to access my website hosted on a DigitalOcean Droplet?

Odoo 16 Server – High Outbound Bandwidth, CPU 98%, Web Console & SSH Unresponsive

Post-Incident Security Validation: Rebuild or Trust the Existing Droplet

Bug Bounty Inquiry Before Submitting Security Report

Currently, outgoing SMTP ports 587 and 465 are blocked by default on my droplet. Could you please unblock outgoing SMTP ports for my droplet

VPS de UBUNTU a Windows

Not see memory usage graph in droplet monitoring

digital ocean charged $10 but my payment method does not get verified and droplet cannot be activated

DNS problem on one site today

new DNS issue today on a website, no changes for many years

View all droplets with tag

Report this

express-session does not work and req.session returns undefined

Related questions

How do I display an image file that is outside the roda root folder?

Why is TikTok unable to access my website hosted on a DigitalOcean Droplet?

Odoo 16 Server – High Outbound Bandwidth, CPU 98%, Web Console & SSH Unresponsive

Post-Incident Security Validation: Rebuild or Trust the Existing Droplet

Bug Bounty Inquiry Before Submitting Security Report

Currently, outgoing SMTP ports 587 and 465 are blocked by default on my droplet. Could you please unblock outgoing SMTP ports for my droplet

VPS de UBUNTU a Windows

Not see memory usage graph in droplet monitoring

digital ocean charged $10 but my payment method does not get verified and droplet cannot be activated

DNS problem on one site today

new DNS issue today on a website, no changes for many years

View all droplets with tag