Examples of multiple session cookies about iron-session

[asciant]

@atonyba did you have any luck getting this working?

I too have a use case for this too, and came here looking for information on whether it is supported/possible.

[vvo]

@atonyba There's no support currently for going over 4k. I'd say that your best option is not to store token + refresh token in the cookie itself but rather only use the cookie to identify the person (id) and then get the token via a regular API call (on your side, like /user) and cache this route in memory + expiration (if you're dealing with an SPA), or cache it via HTTP headers for like 10 minutes.

The advantage of this is that you can control on your side the data and invalidate it when you want.

PS: Not sure why you're storing tokens inside the cookie itself, is your token used for an external API afterward?

About allowing multiple instances of next-iron-session, that's a good idea but we would have to allow naming the req.session property (like req.session2..) or better: require people to call a method to get the session object instead of extending req.

@asciant can you tell us more about your usecase?

[vvo]

Not in scope of the library