Cloudflare effecting GET requests to nginx and my Node.js server?

BarryCarlyon · May 31, 2022, 12:07pm

it might be as simple as

// for nginx/nrgok
app.set('trust proxy', 1) // trust first proxy

added before this line.

I tend to run something similar to this (click thru for full code snippet/session setup)

github.com

BarryCarlyon/twitch_misc/blob/main/examples/moderator_dashboard/server.js#L58

      
        
            //    console.error('REDIS Error', err);
            //});
            
            
/*
            Generate a random string at start up
            To secure sessions with
            This means when the server restarts, it'll generate a new string
            */
            var secret = crypto.randomBytes(64).toString('hex');
            
            
/* Session */
            const session = require('express-session');
            const RedisStore = require('connect-redis')(session);
            // Usually you'll put the node process
            // behind a proxy such as nginx
            // so that proxy will handle the SSL Certs
            // trust proxy will tell the session handler to trust the SSL ness of the cookie
            // see also https://expressjs.com/en/guide/behind-proxies.html
            // for other options you may want to use something more specific than a true
            app.set('trust proxy', 1);

You can also debug/determine if it’s this by logging sessionID’s and see if the sessionID is constantly changing rather than “sticking” like it should.