From 7161d6293b83f359646814f2e1cdfa02e6162c2a Mon Sep 17 00:00:00 2001
From: Peter Wu <peter@lekensteyn.nl>
Date: Thu, 7 May 2015 09:27:37 +0200
Subject: Move session key to config

---
 app.js    | 2 +-
 config.js | 6 ++++++
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/app.js b/app.js
index 69abdd8..d4461db 100644
--- a/app.js
+++ b/app.js
@@ -20,7 +20,7 @@ mongoose.connection.on('error', function(err) {
 
 // persistence (for sessions)
 app.use(session({
-    secret: 'Very secret',
+    secret: config.session_secret,
     store: new MongoStore({ mongooseConnection: mongoose.connection }),
     name: 'rvssid',
     saveUninitialized: false,
diff --git a/config.js b/config.js
index a3400b8..372c542 100644
--- a/config.js
+++ b/config.js
@@ -11,3 +11,9 @@ exports.port = 3000;
  * Mongoose connection URI.
  */
 exports.dburi = 'mongodb://localhost/rvs';
+
+/**
+ * Secret which signs session ID cookies.
+ * https://github.com/expressjs/session#secret
+ */
+exports.session_secret = 'Very safe. Much secret. Wow.';
-- 
cgit v1.2.1