npm / express-session
express-session
What changed in express-session 1, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-24.
2 new APIs and options
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initexpress-session 12 changes
New APIs and options 2
Cookie options can now be provided dynamically based on each request, enabling context-aware configuration of cookie attributes.
The
autooption sets SameSite=None for HTTPS and SameSite=Lax for HTTP connections.