hono-sessions

import { Hono } from 'hono' import { Session, sessionMiddleware, CookieStore } from 'hono-sessions' // Add types to your session data for improved safety and autocomplete type SessionDataTypes = { 'counter': number, 'flashMessage'?: string } // Set up your Hono instance with session types const app = new Hono<{ Variables: { session: Session<SessionDataTypes>, session_key_rotation: boolean // Type for internal middleware variable } }>() const store = new CookieStore() app.use('*', sessionMiddleware({ store, // IMPORTANT: encryptionKey must be at least 32 characters long for CookieStore encryptionKey: process.env.SESSION_ENCRYPTION_KEY ?? 'super-secret-key-that-is-at-least-thirty-two-characters-long', expireAfterSeconds: 900, // Session expires after 15 minutes of inactivity autoExtendExpiration: true, // Automatically extends session on activity (default: true) cookieOptions: { sameSite: 'Lax', // Recommended for basic CSRF protection path: '/', // Required for the library to function correctly httpOnly: true, // Recommended to prevent client-side script access secure: process.env.NODE_ENV === 'production' // Use 'Secure' in production }, })) app.get('/', async (c) => { const session = c.get('session') const currentCounter = session.get('counter') || 0; session.set('counter', currentCounter + 1); const flash = session.getFlash('flashMessage'); if (flash) { console.log(`Flash message: ${flash}`); } return c.html(` <h1>You have visited this page ${session.get('counter')} times</h1> ${flash ? `<p style="color: green;">${flash}</p>` : ''} <p><a href="/set-flash">Set a flash message</a></p> <p><a href="/read">Read counter (and touch session)</a></p> `) }) app.get('/set-flash', async (c) => { const session = c.get('session'); session.setFlash('flashMessage', 'This is a one-time message!'); return c.redirect('/'); }); app.get('/read', (c) => { const session = c.get('session') session.touch() // Explicitly update the session expiration time return c.json({ counter: session.get('counter'), flash: session.getFlash('flashMessage') // This will be undefined after first read }) }) // For Bun, Cloudflare Workers, etc. // export default { // port: 3000, // fetch: app.fetch // } // For Deno // Deno.serve(app.fetch) // For Node.js (via Hono adapter) // import { serve } from '@hono/node-server'; // serve({ fetch: app.fetch, port: 3000 });