Release 2.17

Added

• Added session.hide() function to hide session cookies from upstream on reverse proxy scenarios.

Release 2.16

Changed

• Delays setting the defaults until needed, allowing users to safely require "resty.session" in different contexts.

Release 2.15

2.15

Added

• Added a support for chunked cookies. See also: #35 Thanks @zandbelt

2.14

Fixed

• Lua code configuration parsing corrections (especially on boolean options).

Added

• Added a more natural way to pass config arguments to storage adapters and ciphers in Lua code. See also: #34 Thanks @hanxi

Release 2.13

Changed

• On start we do send cookie now also if the settings have changed and the cookie expiry time needs to be reduced.

Fixed

• Memcache storage adapter had a missing ngx.null.

Release 2.12

Added

• Implemented pluggable session identifier generators.
• Implemented random session idenfier generator.

Changed

• Now checks if headers were already sent before trying to set the
  cookie headers.
• SSL session identifier is not checked by default anymore.
• Lua session.identifier.length changed to session.random.length.
• Nginx $session_identifier_length changed to $session_random_length.

Release 2.10

Added

• Support for the official OpenResty package manager (opm).

Changed

• Changed the change log format to keep-a-changelog.

Release 2.9

• Bugfix: Weird bug where RAND_bytes was not working on Windows platform. Code changed to use resty.random. See Also: #31. Thanks @gtuxyco

Release 2.8

• Bugfix: AES Cipher used a wrong table for cipher sizes. See Also: #30. Thanks @Pronan

Release 2.7

• Feature: Redis storage adapter now supports Redis authentication. See Also: #28. Thanks @cheng5533062.

Release 2.6

• Just cleanups and changed _VERSION to point correct version.