From cececfb4ef6c8f7ff548da5707f5e0bdcbe0d6d4 Mon Sep 17 00:00:00 2001
From: Debian <debian@mm-dev.novalocal>
Date: Fri, 16 Oct 2020 12:30:11 +0000
Subject: [PATCH] Use shared cookieparser for web and websocket

---
 server/server.js | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/server/server.js b/server/server.js
index 6ea73b83..08f05eb4 100755
--- a/server/server.js
+++ b/server/server.js
@@ -87,10 +87,10 @@ const tls =
 const app = express();
 
 app.use(helmet.hsts());
-
-app.use(cookieParser());
-app.use(bodyParser.json());
-app.use(bodyParser.urlencoded({ extended: true }));
+const sharedCookieParser=cookieParser();
+app.use(sharedCookieParser);
+app.use(bodyParser.json( { limit: '5mb' }));
+app.use(bodyParser.urlencoded({ limit: '5mb', extended: true }));
 
 const session = expressSession({
 	secret            : config.cookieSecret,
@@ -648,11 +648,7 @@ async function runWebSocketServer()
 {
 	io = require('socket.io')(mainListener);
 
-	io.use(
-		sharedSession(session, {
-			autoSave : true
-		})
-	);
+	io.use(sharedSession(session, sharedCookieParser, { autoSave : true },{cookie: false}));
 
 	// Handle connections from clients.
 	io.on('connection', (socket) =>