Own session data is overwritten by passport about passport HOT 5 CLOSED

When you call passport.authenticate(), you need to pass keepSessionInfo: true in the AuthenticateOptions object.

Example:

passport.authenticate('authProvider', { keepSessionInfo: true });

from passport.

I see! perfect, thank you.

This should probably be added to the sessions documentation page though? https://www.passportjs.org/concepts/authentication/sessions/

There is no mention of this option anywhere otherwise I believe?

from passport.

Code setup

//setup own session
server.use(
      session({
        secret: secret,
        resave: false,
        saveUninitialized: false,
      }),
    );
     
//setup passport    
server.use(passport.initialize());
server.use(passport.session());

some request before login:

request.session.myOwnCustomData = true;
request.session.save(function (err) {
          if (err) return request.next(err);
});

after passport google oauth login, with google strategy etc, this logs undefined:

console.log(request.session.myOwnCustomData);

from passport.

Got the same error. Did you solve it @flyon?

from passport.

No, not yet, i ended up just using passport for now, replacing the functionality i had built elsewhere. It may become an issue again though if i need to do other things with sessions, not sure

from passport.