signIn

Signs a visitor in: gives the session a new id first, then stores values in it. The id that came with the request (planted by an attacker before the sign-in, if it was) stops working at once, so session fixation is closed by construction. Data the session held before (an anonymous cart) is kept. Prefer it to calling session.set("userId", …) yourself.

Import#

import { signIn } from "@shadow-js/dusk/server";

Signature#

function signIn(session: Session, values: Readonly<Record<string, unknown>>): void

Parameters#

Examples#

const session = await sessions.get(event);
signIn(session, { userId: user.id });