ci/config-templates/SessionProvider-template.json


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

{

  "debug": ${DEBUG_PLUGINS},

  //Provider assemblies to load
  "provider_assemblies": [ "VNLib.Plugins.Sessions.VNCache.dll" ],

  //Web session provider, valid format for VNCache and also memory sessions
  "web": {
    //Cache system key prefix
    "cache_prefix": "websessions",
    //The session cookie name
    "cookie_name": "cmnext-ses",
    //Size in bytes for generated session ids
    "cookie_size": 40,
    //time (in seconds) a session is valid for
    "valid_for_sec": 3600,
    //The maxium number of connections waiting for the cache server responses
    "max_waiting_connections": 100,
    //Enforce strict cross-origin session checks
    "strict_cors": true,
    ///Enforces strict TLS to help prevent tls downgrades based on stored session variables (privacy note: this can be leaked through brute-forced if session id is stolen)
    "strict_tls_protocol": true
  } 
}