Florian Mozart
Florian Mozart

Reputation: 449

How to use passport.js's TwitterStrategy sessionless?

I tried to implement TwitterStrategy like it's done with Facebook in: Token based, sessionless auth using express and passport

But express still wants me to use session middleware:

{"message":"OAuthStrategy requires session support. Did you forget app.use(express.session(...))?"

Can someone provide a detailed example?

Upvotes: 0

Views: 361

Answers (1)

Jayram
Jayram

Reputation: 19588

From Passport twitter middleware issue reported earlier on gihub

Any OAuth 1.0 strategy requires sessions. OAuth 2 requires it if state is enabled (which is highly recommended). 
A temporary secret is stored in the session to prevent cross site scripting attacks.

Upvotes: 1

Related Questions