From 75637708c09c84246ddc2ae757a5b026d74398c1 Mon Sep 17 00:00:00 2001
From: Richard Hansen <rhansen@rhansen.org>
Date: Wed, 12 Jan 2022 18:29:29 -0500
Subject: [PATCH] express: Move up `cookie-parser` middleware

This makes it possible for the `preAuthorize` and `preExpressSession`
hooks to easily read or set cookies.
---
 src/node/hooks/express.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/node/hooks/express.js b/src/node/hooks/express.js
index 8704835a9..f7ac91f42 100644
--- a/src/node/hooks/express.js
+++ b/src/node/hooks/express.js
@@ -170,6 +170,8 @@ exports.restartServer = async () => {
     }));
   }
 
+  app.use(cookieParser(settings.sessionKey, {}));
+
   exports.sessionMiddleware = expressSession({
     secret: settings.sessionKey,
     store: new SessionStore(),
@@ -212,7 +214,6 @@ exports.restartServer = async () => {
     // call `next('route')` which will skip the remaining middlewares in this list.
     webaccess.nextRouteIfPreAuthorized,
     exports.sessionMiddleware,
-    cookieParser(settings.sessionKey, {}),
     webaccess.checkAccess,
   ]);