Improve session management by persisting user sessions in production

Update server configuration to use connect-pg-simple for PostgreSQL session storage in production environments and MemoryStore for development.

Replit-Commit-Author: Agent
Replit-Commit-Session-Id: ae4037a0-2a6f-4530-9bac-79b543286bda
Replit-Commit-Checkpoint-Type: full_checkpoint
Replit-Commit-Screenshot-Url: https://storage.googleapis.com/screenshot-production-us-central1/397bca8c-984f-43ff-841a-10897aeb8140/ae4037a0-2a6f-4530-9bac-79b543286bda/G8GuKB7
This commit is contained in:
michaelschal committed 2025-10-08 13:30:19 +00:00
1 parent d7ade0982c
commit 747469bc4c
3 files changed
+21 -5

No files matched your search

+6 -1
View File
@@ -37,6 +37,9 @@ Preferred communication style: Simple, everyday language.
- sameSite: 'lax' pour prévention CSRF
- Durée de session: 7 jours
- Secret de session via variable d'environnement `SESSION_SECRET`
- Store de session:
- **Production**: PostgreSQL via connect-pg-simple (table `session` auto-créée)
- **Développement**: MemoryStore (par défaut)
**Protection des routes**:
- Backend: Middleware `requireAuth` pour routes utilisateur, `requireAdmin` pour routes admin
@@ -94,7 +97,9 @@ Preferred communication style: Simple, everyday language.
- Scheduler service running every minute to check for pending posts
- Automated post publication to social media platforms
**Session Management**: Stateless authentication with session cookies (connect-pg-simple for PostgreSQL session store)
**Session Management**:
- Développement: MemoryStore (sessions en mémoire)
- Production: connect-pg-simple (sessions persistées dans PostgreSQL, table `session`)
**Key Architectural Patterns**:
- Service layer pattern (OpenRouterService, CloudinaryService, SchedulerService)