I am experiencing a challenge where Express is not including the Set-Cookie header when using express-session and setting the secure option to true. This issue arises specifically on a remote server with a valid certificate signed by Let's Encrypt.
const express = require('express')
const session = require('express-session')
const app = express()
const port = 3000
const sessionMiddleware = session({
secret: 'secret',
resave: false,
rolling: true,
saveUninitialized: false,
cookie: {
secure: true,
httpOnly: false,
maxAge: 1000 * 60 * 10 * 1000
}
});
app.use(sessionMiddleware)
app.get('/', (req, res) => {
req.session.foo = 'bar';
res.send('Hello World!')
})
app.listen(port, () => {
console.log(`Example app listening on port ${port}`)
});
What steps can I take to enable Express to properly set the cookie in this scenario?